Security Advisory

CVE-2019-8231

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-11-05 23:56:33
Last updated 2024-08-04 21:10:33
Assigner adobe
State PUBLISHED

Description

In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code through custom layout modification.