What is the CVSS score of CVE-2019-7859?

CVE-2019-7859 has a CVSS 3.0 base score of 7.5 (High). CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 1.5%.

Which versions of Magento are affected by CVE-2019-7859?

A path traversal vulnerability in the WYSIWYG editor for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could result in unauthorized access to uploaded images…. A patch is available.

Is there a patch available for CVE-2019-7859?

Yes, a patch is available for CVE-2019-7859. Update the affected software to the latest version immediately.

Magento CVE-2019-7859

HIGH

Path Traversal (CWE-22)

2019-08-02 psirt@adobe.com

Authentication Bypass Path Traversal Adobe Magento

7.5

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

7.5