Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21207
HistoryAug 14, 2019 - 5:18 a.m.

Remote Code Execution (RCE)

2019-08-1405:18:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.003 Low

EPSS

Percentile

66.2%

magento/community-edition is vulnerable to remote code execution (RCE). The vulnerability exists as a user with admin privileges to layouts can execute code through a XML layout update.

0.003 Low

EPSS

Percentile

66.2%