- Description
- A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges to layouts can execute arbitrary code through a combination of product import, crafted csv file and XML layout update.
- Source
- psirt@adobe.com
- NVD status
- Analyzed
CVSS 3.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 5.9
- Exploitability score
- 1.2
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 6.5
- Impact score
- 6.4
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:P/I:P/A:P
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE066118-96FB-423F-B962-F904ACD6340C",
"versionEndExcluding": "2.1.18",
"versionStartIncluding": "2.1.0"
},
{
"criteria": "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7822059-9FC0-45E5-826B-4DF2AB07F2BD",
"versionEndExcluding": "2.2.9",
"versionStartIncluding": "2.2.0"
},
{
"criteria": "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B8C5A27-2957-4373-B0FE-8C7585B4B04E",
"versionEndExcluding": "2.3.2",
"versionStartIncluding": "2.3.0"
}
],
"operator": "OR"
}
]
}
]