PT-2019-18934

Name of the Vulnerable Software and Affected Versions Magento 2.2 versions 2.2.0 through 2.2.9 Magento 2.3 versions 2.3.0 through 2.3.2 Description An XPath entity injection issue exists, allowing an attacker to craft a GET request to the page cache block rendering module. This request gets passe...