tocsin

Packagist/magento/core CVE-2019-8231: high 7.2, EPSS 1.41%

Magento Remote code execution through catalog attribute sets

Action: Upgrade magento/core to 1.9.4.3 or later.

composer require magento/core:1.9.4.3

Affected

introducedfixedlast affected
01.9.4.3-

Fixed versions

1.9.4.3

Sources

CVE-2019-8231 · published · modified · JSON