https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 10:01:07 +0000 https://cve.radiocsirt.org/vuln/certfr-2019-avi-295 certfr-2019-avi-295 https://cve.radiocsirt.org/vuln/certfr-2019-avi-295 https://cve.radiocsirt.org/vuln/cnvd-2019-39393 cnvd-2019-39393 https://cve.radiocsirt.org/vuln/cnvd-2019-39393 https://cve.radiocsirt.org/vuln/euvd-2026-51727 EUVD-2026-51727 https://cve.radiocsirt.org/vuln/euvd-2026-51727 https://cve.radiocsirt.org/vuln/fkie_cve-2019-7930 <p>A file upload restriction bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges to the import feature can make modifications to a configuration file, resulting in potentially unauthorized removal of file upload restrictions. This can result in arbitrary code execution when a malicious file is then uploaded and executed on the system.</p> <p>A file upload restriction bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges to the import feature can make modifications to a configuration file, resulting in potentially unauthorized removal of file upload restrictions. This can result in arbitrary code execution when a malicious file is then uploaded and executed on the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-7930 https://cve.radiocsirt.org/vuln/ghsa-3h69-4frw-g2jm <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>A file upload restriction bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges to the import feature can make modifications to a configuration file, resulting in potentially unauthorized removal of file upload restrictions. This can result in arbitrary code execution when a malicious file is then uploaded and executed on the system.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>A file upload restriction bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with administrator privileges to the import feature can make modifications to a configuration file, resulting in potentially unauthorized removal of file upload restrictions. This can result in arbitrary code execution when a malicious file is then uploaded and executed on the system.</p> https://cve.radiocsirt.org/vuln/ghsa-3h69-4frw-g2jm https://cve.radiocsirt.org/vuln/gsd-2019-7930 gsd-2019-7930 https://cve.radiocsirt.org/vuln/gsd-2019-7930