CVE-2019-8227

State: PUBLISHED · Published: 2019-11-06 · Updated: 2024-08-04 · Assigner: adobe

Description

In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import / export functionality when creating profile action XML.

CWE

(none)

Affected

Adobe Systems Incorporated / Magento 1 — v=Magento Open Source prior to 1.9.4.3 [affected]; v=and Magento Commerce prior to 1.14.4.3 [affected]

CVSS

(none)

References

https://magento.com/security/patches/supee-11219 x_refsource_MISC

Source

cvelistV5-main/cves/2019/8xxx/CVE-2019-8227.json