CVE-2019-8229: vulnerability in Adobe Systems Incorporated Magento 1
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.4%
In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes can execute arbitrary code through crafted layout updates.
Affected products
Adobe Systems Incorporated · Magento 1Related CVEs — Adobe Systems Incorporated Magento 1
In the same product, most dangerous first.