Lucene search
Veracode Vulnerability DatabaseVERACODE:21166HistoryAug 08, 2019 - 2:01 a.m.
Arbitrary Code Execution
2019-08-0802:01:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
36.3%
magento/community-edition is vulnerable to arbitrary code execution. The vulnerability exists as an admin with import feature privileges can make modifications to a configuration file that allows unauthorized removal of file upload restrictions, causing arbitrary code execution.
Related
osv
osv
CVE-2019-7930
2019-08-02 22:15:18
Magento 2 Community Unrestricted File Upload
2022-05-24 16:52:28
nvd
nvd
CVE-2019-7930
2019-08-02 22:15:18
cve
cve
CVE-2019-7930
2019-08-02 22:15:18
cvelist
cvelist
CVE-2019-7930
2019-08-02 21:30:46
friendsofphp
friendsofphp
prion
prion
Unrestricted file upload
2019-08-02 22:15:00
github
github
Magento 2 Community Unrestricted File Upload
2022-05-24 16:52:28
openvas
openvas