Lucene search
Veracode Vulnerability DatabaseVERACODE:21193HistoryAug 13, 2019 - 6:06 a.m.
Remote Code Execution (RCE)
2019-08-1306:06:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.003 Low
EPSS
Percentile
66.2%
magento/community-edition is vulnerable to remote code execution (RCE). The vulnerability exists as a user with admin privileges to email templates can execute arbitrary code by previewing a malicious template.
| CPE | Name | Operator | Version |
|---|---|---|---|
| magento/community-edition | le | 2.1.17 | |
| magento/community-edition | le | 2.2.8 | |
| magento/community-edition | le | 2.3.1 |
Related
prion
prion
Remote code execution
2019-08-02 22:15:00
nvd
nvd
CVE-2019-7903
2019-08-02 22:15:17
osv
osv
CVE-2019-7903
2019-08-02 22:15:17
Magento 2 Community Edition RCE Vulnerability
2022-05-24 16:52:26
friendsofphp
friendsofphp
PRODSECBUG-2306: Remote code execution through crafted email templates
2019-06-25 00:00:00
cve
cve
CVE-2019-7903
2019-08-02 22:15:17
github
github
Magento 2 Community Edition RCE Vulnerability
2022-05-24 16:52:26
cvelist
cvelist
CVE-2019-7903
2019-08-02 21:25:07
openvas
openvas