CVE-2019-8231

In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code…

published November 5, 2019

CVSS
—
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code through custom layout modification.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01412 · 72.5th percentile
Published
2019-11-05T23:56Z
EPSS history
Timeline
  • 05 NOV 23:56Z
    In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code…
    cvelistv5