Path Traversal Vulnerability in Magento WYSIWYG Editor Allows Unauthorized Access to Uploaded Images

CVE-2019-7859 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

A path traversal vulnerability in the WYSIWYG editor for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could result in unauthorized access to uploaded images due to insufficient access control.

Learn more about our Web Application Penetration Testing UK.