Lucene search
Veracode Vulnerability DatabaseVERACODE:21164HistoryAug 08, 2019 - 1:55 a.m.
Remote Code Execution (RCE)
2019-08-0801:55:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.003 Low
EPSS
Percentile
66.2%
magento/community-edition is vulnerable to remote code execution (RCE). The vulnerability exists as an admin, who is able to create or edit a product, is able to upload RCE payloads through XML layout updates.
| CPE | Name | Operator | Version |
|---|---|---|---|
| magento/community-edition | le | 2.1.17 | |
| magento/community-edition | le | 2.2.8 | |
| magento/community-edition | le | 2.3.1 |
Related
github
github
Magento 2 Community Edition RCE
2022-05-24 16:52:28
nvd
nvd
CVE-2019-7942
2019-08-02 22:15:19
cve
cve
CVE-2019-7942
2019-08-02 22:15:19
osv
osv
CVE-2019-7942
2019-08-02 22:15:19
Magento 2 Community Edition RCE
2022-05-24 16:52:28
cvelist
cvelist
CVE-2019-7942
2019-08-02 21:34:07
prion
prion
Remote code execution
2019-08-02 22:15:00
friendsofphp
friendsofphp
PRODSECBUG-2375: Arbitrary code execution via malicious XML layouts
2019-06-25 00:00:00
openvas
openvas