CVE-2019-8091

State: PUBLISHED · Published: 2019-11-05 · Updated: 2024-08-04 · Assigner: adobe

Description

A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3. An authenticated admin user with privileges to access product attributes can leverage layout updates to trigger remote code execution.

CWE

(none)

Affected

Adobe Systems Incorporated / Magento 1 — v=Magento Open Source prior to 1.9.4.3 [affected]; v=and Magento Commerce prior to 1.14.4.3 [affected]

CVSS

(none)

References

https://magento.com/security/patches/supee-11219 x_refsource_MISC

Source

cvelistV5-main/cves/2019/8xxx/CVE-2019-8091.json