A user could insert information in a return path, thereby storing information on the file system that could lead to Remote Code Execution (RCE).

Part of patch SUPEE-9652

This vulnerability affects the following application versions:

  • Magento 1.9.3.7

Skriv et svar

Din e-mailadresse vil ikke blive publiceret. Krævede felter er markeret med *