CVE-2019-8111

CVE-2019-8111 affects Magento: Magento 2.2.x before 2.2.10 and Magento 2.3.x before 2.3.3 (or 2.3.2-p1) are vulnerable. An authenticated user can use email-template plugin functionality to manipulate the interceptor class, enabling remote code execution. The vulnerability description is consisten...