Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-8230

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-qp43-2vhf-cj8g

Magento Remote code execution through support/output path modification In Magento Open Source prior to 1.9.4.3, and Magento Commerce prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through a crafted support/output path.

gitlab/packagist/magento/community-edition/CVE-2019-8230

Improper Input Validation In Magento an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through a crafted support/output path.

gitlab/packagist/magento/core/CVE-2019-8230

Improper Input Validation An authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through a crafted support/output path.