CVE-2019-8232

creationtimestamp| type| source ---|---|--- 2024-02-05 07:06:55+00:00| seen| https://t.me/ctinow/178982...

CVE-2019-8232

In Magento, versions affected include 1.x up to 1.9.4.3, 1.14.4.3, 2.2 up to 2.2.10, and 2.3 up to 2.3.3 or 2.3.2-p1. The issue is a race condition that, when an authenticated admin uses the import feature, enables arbitrary code execution by modifying the webserver configuration file. This is th...