CVE-2019-8125
CVE-2019-8125
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.7%KEV nãoPoC —Patch —
Lifecycle
Nov 05, 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. An authenticated admin user can modify configuration parameters via crafted support configuration. The modification can lead to remote code execution.
Affected products
Adobe Systems Incorporated · Magento 1Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →