CVE-2019-8230

State: PUBLISHED · Published: 2019-11-05 · Updated: 2024-08-04 · Assigner: adobe

Description

In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through a crafted support/output path.

CWE

(none)

Affected

Adobe Systems Incorporated / Magento 1 — v=Magento Open Source prior to 1.9.4.3 [affected]; v=and Magento Commerce prior to 1.14.4.3 [affected]

CVSS

(none)

References

https://magento.com/security/patches/supee-11219 x_refsource_MISC

Source

cvelistV5-main/cves/2019/8xxx/CVE-2019-8230.json