← CVE Intelligence

CVE-2019-8231

Adobe Systems Incorporated / Magento 1 PUBLISHED

Description (CNA)

In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code through custom layout modification.

Affected (CNA)

Vendor / productVersions
Adobe Systems Incorporated / Magento 1affected Magento Open Source prior to 1.9.4.3; affected Magento Commerce prior to 1.14.4.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.