Advisory details:
github_osv / GHSA-89ch-hqf9-rgp3
| Advisory ID | github_osv/GHSA-89ch-hqf9-rgp3 |
| Aliases |
CVE-2019-8121
|
| Summary | Using JS libraries with known security vulnerabilities An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Magento 2 codebase leveraged outdated versions of JS libraries (Bootstrap, jquery, Knockout) with known security vulnerabilities. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| There are no known CWE. |
| System | Score | Found at |
|---|---|---|
| generic_textual | HIGH |
| Reference id | Reference type | URL |
|---|---|---|
| https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update | ||
| CVE-2019-8121 | https://nvd.nist.gov/vuln/detail/CVE-2019-8121 | |
| CVE-2019-8121.YAML | https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-8121.yaml |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.