CVE-2019-8230

creationtimestamp| type| source ---|---|--- 2024-02-04 16:47:09+00:00| seen| https://t.me/ctinow/178881...

CVE-2019-8230

In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through a crafted support/output path...

CVE-2019-8230

Magento Open Source/Commerce prior to 1.9.4.3 / 1.14.4.3 is affected. An authenticated administrator who can edit configuration settings can execute arbitrary code via a crafted request to the support/output path. Root cause appears related to improper handling of the support/output path (path tr...