Beveiligingsadvies

CVE-2019-8126

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-11-05 22:55:02

Laatst bijgewerkt 2024-08-04 21:10:32

Toegewezen door adobe

CVSS-score geen score

Status PUBLISHED

Beschrijving

An XML entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can craft document type definition for an XML representing XML layout. The crafted document type definition and XML layout allow processing of external entities which can lead to information disclosure.

← Alle CVE's bekijken Bekijk op cve.org ↗