← CVE Intelligence

CVE-2019-8229

Adobe Systems Incorporated / Magento 1 PUBLISHED

Description (CNA)

In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes can execute arbitrary code through crafted layout updates.

Affected (CNA)

Vendor / productVersions
Adobe Systems Incorporated / Magento 1affected Magento Open Source prior to 1.9.4.3; affected and Magento Commerce prior to 1.14.4.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.