CVE-2019-7888

CVE-2019-7888 affects Magento 2.1 (before 2.1.18), 2.2 (before 2.2.9), and 2.3 (before 2.3.2). An authenticated user with privileges to create email templates could leak sensitive data via a malicious email template. The connected sources corroborate the vulnerability description and list vendor-...