The import/export functionality in Magento unserialized data supplied from the Admin dashboard without proper checks. This could lead to possible code execution if a malicious user has Magento Admin access, even if access is limited to the import/export functionality.

Part of patch SUPEE-8788

This vulnerability affects the following application versions:

  • Magento 1.9.2.2
  • Magento 1.9.2.3
  • Magento 1.9.2.4

Skriv et svar

Din e-mailadresse vil ikke blive publiceret. Krævede felter er markeret med *