CVE-2019-8137

creationtimestamp| type| source ---|---|--- 2024-02-04 14:41:22+00:00| seen| https://t.me/ctinow/178838...

CVE-2019-8137

CVE-2019-8137 describes a remote code execution vulnerability in Magento where an authenticated user with CMS-edit permissions can trigger code execution through a crafted custom layout update. Affected versions are Magento 2.2.x before 2.2.10 and Magento 2.3.x before 2.3.3, or 2.3.2-p1. The unde...