An authenticated user with administrative privileges to import features could execute arbitrary code through a crafted configuration archive file upload.

Part of release Magento 2.3.3 and 2.2.10 Security Update

This vulnerability affects the following application versions:

  • Magento 2.3.0
  • Magento 2.3.1
  • Magento 2.3.2

Skriv et svar

Din e-mailadresse vil ikke blive publiceret. Krævede felter er markeret med *