Skip to content
OpenAdvisories

Product · Adobe

Magento 1

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2019-8230

    Magento Remote code execution through support/output path modification

    In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through a crafted support/output path.

    Adobe Magento 1 magento/core Web / CMS Packagist
  • High 7.2
    CVE-2019-8231

    Magento Remote code execution through catalog attribute sets

    In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code through custom layout modification.

    Adobe Magento 1 magento/core Web / CMS Packagist