PT-2019-18912 · Adobe · Magento

Publicado 2019-11-05 · Atualizado 2022-05-24 · CVE-2019-8136

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Magento 2.2 versions prior to 2.2.10 Magento 2.3 versions prior to 2.3.3 or 2.3.2-p1

Description An insecure component issue exists due to the use of outdated versions of HTTP specification abstraction implemented in the symphony component.

Recommendations For Magento 2.2, update to version 2.2.10 or later. For Magento 2.3, update to version 2.3.3 or 2.3.2-p1 or later.

Exploit

Correção

Identificadores relacionados

CVE-2019-8136

GHSA-XGCP-59G2-WM8G

Produtos afetados

Magento

Referências · 8

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-8136.yaml · Exploit
• https://github.com/magento/magento2 · Nota
• https://osv.dev/vulnerability/GHSA-xgcp-59g2-wm8g · Aviso do Fabricante
• https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-8136 · Nota de Segurança
• https://web.archive.org/web/20220121051105/https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update · Nota
• https://osv.dev/vulnerability/CVE-2019-8136 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8136 · Nota