Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-8140
HistoryNov 06, 2019 - 12:15 a.m.

Unrestricted file upload

2019-11-0600:15:00
PRIOn knowledge base
www.prio-n.com
2

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

An unrestricted file upload vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can manipulate the Synchronization feature in the Media File Storage of the database to transform uploaded JPEG file into a PHP file.

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%