Magento 2 Community Edition Arbitrary File Deletion

An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated users can manipulate the design layout update feature...

PT-2019-18930 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.2 prior to 2.2.10 Magento versions 2.3 prior to 2.3.3 or 2.3.2-p1 Magento versions prior to 3.1.2 Description: A remote code execution vulnerability exists, allowing an authenticated user with privileges to modify product...

PRODSECBUG-2444: Missing logs of configuration changes related to design update

More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...