CVE-2019-7859

A path traversal vulnerability in the WYSIWYG editor for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could result in…

published August 2, 2019

CVSS
—
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

A path traversal vulnerability in the WYSIWYG editor for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could result in unauthorized access to uploaded images due to insufficient access control.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01454 · 73.2th percentile
Published
2019-08-02T21:13Z
EPSS history
Timeline
  • 02 AUG 21:13Z
    A path traversal vulnerability in the WYSIWYG editor for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could result in…
    cvelistv5