Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/magento/community-edition@2.3.2-p1
purl pkg:composer/magento/community-edition@2.3.2-p1
Tags Ghost
Next non-vulnerable version 2.4.6-p9
Latest non-vulnerable version 2.4.9-alpha3
Risk score 2.5
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-wg25-j79r-v5wp
Aliases:
CVE-2019-8129
Magento Cross-Site Scripting via Signifyd Guarantee Option Translation Override A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior …
2.3.2-p2
Vulnerable
Vulnerabilities fixed by this package (27)

Advisory Summary Aliases
GHSA-gfcq-wh3g-c6h4
Magento 2 Community Edition RCE Vulnerability A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 … CVE-2019-8110
GHSA-v8fg-p27h-mxjp
Magento 2 Community Edition XSS Vulnerability A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8147
GHSA-56hf-w8gm-448q
Magento 2 Community Edition XSS Vulnerability A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8092
GHSA-32x5-6p4q-q8jh
Magento Information Disclosure via File upload functionality An arbitrary file access vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8093
GHSA-x72m-p4qc-p7rv
Magento 2 Community Edition RCE Vulnerability via CSRF A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, … CVE-2019-8109
GHSA-vx7m-v8v2-fhwm
Magento 2 Community Edition XSS Vulnerability A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8131
GHSA-2cg3-w597-rjfv
Magento 2 Community Edition Arbitrary File Deletion An arbitrary file deletion vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8107
GHSA-vrw4-34p5-pjg5
Magento Cross-Site Scripting via admin panel A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8157
GHSA-85xw-3hp5-6fmc
Magento 2 Community Edition XSS Vulnerability A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8138
GHSA-8mwx-wpp4-5xh4
Magento Broken authentication and session managememt Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8149
GHSA-mhwc-4w67-xq2c
Magento Cross-Site Scripting via store name A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8128
GHSA-jrjx-8gmw-jj2q
Magento 2 Community Edition RCE Vulnerability A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 … CVE-2019-8137
GHSA-298q-wv2h-v5vw
Magento 2 Community Edition XSS Vulnerability A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8142
GHSA-94q8-gx29-6mqv
Magento Injection vulnerability via email templates A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior … CVE-2019-8143
GHSA-gjjm-4x3g-3h33
Magento 2 Community Edition XSS Vulnerability A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or … CVE-2019-8139
GHSA-x42g-82pp-4v6g
Magento SQL injection vulnerability A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 … CVE-2019-8130
GHSA-vpg9-gq7j-mxqg
Magento 2 Community Edition RCE Vulnerability A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. … CVE-2019-8144
GHSA-2crc-5vq6-386r
Magento 2 Community Edition RCE Vulnerability A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 … CVE-2019-8111
GHSA-xgcp-59g2-wm8g
Magento 2 Community Edition Insecure Component An insecure component vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior … CVE-2019-8136
GHSA-v99w-jxr4-w6mc
Magento 2 Community Edition XSS Vulnerability A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8117
GHSA-45gj-78hc-4mvc
Magento SQL injection via marketing account with access to email templates variables A SQL injection vulnerability exists in Magento 2.2 … CVE-2019-8134
GHSA-g378-6fg4-gx3v
Magento 2 Community Edition XSS Vulnerability A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8132
GHSA-c4r2-3f9r-rwp8
Magento 2 Community Weak PRNG Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1 uses cryptographically weak … CVE-2019-8113
GHSA-6vc8-3xf2-qrxx
Magento 2 Community Edition RCE Vulnerability In Magento prior to 1.9.4.3, Magento prior to 1.14.4.3, Magento 2.2 prior to 2.2.10, … CVE-2019-8232
GHSA-p9vf-4jx2-5hpp
Magento 2 Community Edition Security Bypass A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior … CVE-2019-8112
GHSA-29mr-gr4c-vf9c
Magento 2 Community Edition XSS Vulnerability A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento … CVE-2019-8115
GHSA-xv69-f7x5-r4qw
Magento Cross-Site Scripting via Attribute Set Name A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, … CVE-2019-8145