Packagist/magento/magento1ce CVE-2019-7938: medium 4.8, EPSS 0.56%

Magento 2 Community Edition XSS Vulnerability

Action: Upgrade magento/magento1ce to 1.9.4.2 or later.

composer require magento/magento1ce:1.9.4.2

Affected

Fixed versions

Sources

• osv: GHSA-mgfr-44wv-hqv6#Packagist/magento/magento1ce
• https://nvd.nist.gov/vuln/detail/CVE-2019-7938
• https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ce/CVE-2019-7938.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ee/CVE-2019-7938.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7938.yaml
• https://github.com/magento/magento2
• https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
• https://web.archive.org/web/20220121051916/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23

CVE-2019-7938 · published 2022-05-24T16:52:28Z · modified 2024-02-16T08:13:39.410595Z · JSON