Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-8156
HistoryNov 06, 2019 - 1:15 a.m.

Server side request forgery (ssrf)

2019-11-0601:15:00
PRIOn knowledge base
www.prio-n.com
7

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.8%

A server-side request forgery (SSRF) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to modify store configurations can manipulate the connector api endpoint to enable remote code execution.

7.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.8%