~ / search / GHSA-w8vh-5v64-j3vr

GHSA-w8vh-5v64-j3vr

Withdrawn on 2023-09-28. GitHub withdrew this advisory; it no longer applies.

Withdrawn Advisory: Magento 2 Community Edition RCE Vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2019-8229

Packages

EcosystemPackageAffectedFixed in
Packagist magento/community-edition < 1.9.4.3 1.9.4.3

Details

As written in the advisory (Markdown source, shown as plain text).

## Withdrawn Advisory This advisory has been withdrawn because the vulnerability does not affect a package in one of the GitHub Advisory Database's [supported ecosystems](https://github.com/github/advisory-database/blob/main/README.md#supported-ecosystems). This link is maintained to preserve external references. ## Original Description In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes can execute arbitrary code through crafted layout updates.

References

External links from the advisory. They lead to third-party sites.