2 matches found
CVE-2019-8230
In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through a crafted support/output path...
7.2CVSS7.3AI score0.01412EPSS
SaveExploits0References1
Path traversal
In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through a crafted support/output path...
6.5CVSS7.2AI score0.01412EPSS
SaveExploits0References1Affected Software1
20