← CVE Intelligence

CVE-2019-7861

n/a / Magento 2 PUBLISHED

Description (CNA)

Insufficient server-side validation of user input could allow an attacker to bypass file upload restrictions in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.

Affected (CNA)

Vendor / productVersions
n/a / Magento 2affected Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.