Security Advisory
CVE-2019-8125
7.2
HIGH
Vulnerability Description
A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. An authenticated admin user can modify configuration parameters via crafted support configuration. The modification can lead to remote code execution.
Published Date
November 5, 2019
Official Source
NIST NVD Advisory