PT-2019-18928 · Adobe · Magento

Published 2019-11-05 · Updated 2022-05-24 · CVE-2019-8152

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Magento 1 versions prior to 1.9.4.3 Magento 1 versions prior to 1.14.4.3 Magento 2.2 versions prior to 2.2.10 Magento 2.3 versions prior to 2.3.3 Magento 2.3 versions prior to 2.3.2-p1

Description A stored cross-site scripting (XSS) issue exists, allowing an authenticated user with access to the wysiwyg editor to inject malicious javascript into the admin dashboard cache by abusing the blockDirective() function.

Recommendations For Magento 1 versions prior to 1.9.4.3, update to version 1.9.4.3 or later. For Magento 1 versions prior to 1.14.4.3, update to version 1.14.4.3 or later. For Magento 2.2 versions prior to 2.2.10, update to version 2.2.10 or later. For Magento 2.3 versions prior to 2.3.3, update to version 2.3.3 or later. For Magento 2.3 versions prior to 2.3.2-p1, update to version 2.3.2-p2 or later. As a temporary workaround, consider restricting access to the wysiwyg editor to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2019-8152

GHSA-JJMG-XMQ2-G6FF

Affected Products

Magento

References · 11

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ee/CVE-2019-8152.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-8152.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ce/CVE-2019-8152.yaml · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-8152 · Security Note
• https://osv.dev/vulnerability/GHSA-jjmg-xmq2-g6ff · Vendor Advisory
• https://magento.com/security/patches/supee-11219 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-8152 · Vendor Advisory
• https://github.com/magento/magento2 · Note
• https://web.archive.org/web/20211209030216/https://magento.com/security/patches/supee-11219 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8152 · Note
• https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update · Note