Ausnahme gefangen: SSL certificate problem: certificate is not yet valid 📌 [PRODSECBUG-2290] Cross-site scripting through the Admin (XSS) - CVE-2019-8157
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 [PRODSECBUG-2290] Cross-site scripting through the Admin (XSS) - CVE-2019-8157


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: portal.patchman.co

Users with permission to edit products could inject an XSS payload when saving a product with a downloadable link.

Part of update Magento 2.3.3 and 2.2.10 Security Update

This vulnerability affects the following application versions:

  • Magento 2.0.0
  • Magento 2.0.1
  • Magento 2.0.2
  • Magento 2.0.3
  • Magento 2.0.4
  • Magento 2.0.5
  • Magento 2.0.6
  • Magento 2.0.7
  • Magento 2.0.8
  • Magento 2.0.9
  • Magento 2.0.10
  • Magento 2.0.11
  • Magento 2.0.12
  • Magento 2.0.13
  • Magento 2.0.14
  • Magento 2.0.15
  • Magento 2.0.16
  • Magento 2.0.17
  • Magento 2.0.18
  • Magento 2.1.0
  • Magento 2.1.1
  • Magento 2.1.2
  • Magento 2.1.3
  • Magento 2.1.4
  • Magento 2.1.5
  • Magento 2.1.6
  • Magento 2.1.7
  • Magento 2.1.8
  • Magento 2.1.9
  • Magento 2.1.10
  • Magento 2.1.11
  • Magento 2.1.12
  • Magento 2.1.13
  • Magento 2.1.14
  • Magento 2.1.15
  • Magento 2.1.16
  • Magento 2.1.17
  • Magento 2.1.18
  • Magento 2.2.0
  • Magento 2.2.1
  • Magento 2.2.2
  • Magento 2.2.3
  • Magento 2.2.4
  • Magento 2.2.5
  • Magento 2.2.6
  • Magento 2.2.7
  • Magento 2.2.8
  • Magento 2.2.9
  • Magento 2.3.0
  • Magento 2.3.1
  • Magento 2.3.2
  • Magento 2.3.2-p1
  • Magento 2.3.2-p2
...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 [PRODSECBUG-1860] Admin Account XSS Attack Cessation via Filename


📈 33.04 Punkte

📌 XSS-LOADER - XSS Payload Generator / XSS Scanner / XSS Dork Finder


📈 29.79 Punkte

📌 [PRODSECBUG-2151] Remote Code Execution through Path Traversal


📈 27 Punkte

📌 [PRODSECBUG-2156] Remote Code Execution through Unauthorized File Upload


📈 27 Punkte

📌 [PRODSECBUG-2198] SQL Injection vulnerability through an unauthenticated user


📈 27 Punkte

📌 [PRODSECBUG-2053] Prevents XSS in Newsletter Template


📈 26.23 Punkte

📌 [PRODSECBUG-2138] Widget Based XSS Vulnerability


📈 26.23 Punkte

📌 [PRODSECBUG-2289] Arbitrary code execution in the advanced admin logging configuration


📈 25.59 Punkte

📌 [ PRODSECBUG-2123 ] PHP Object Injection (POI) and Remote Code Execution (RCE) in the Admin


📈 25.59 Punkte

📌 Mail.ru: Blind XSS Stored On Admin Panel Through Name Parameter In [ https://technoatom.mail.ru/]


📈 22.48 Punkte

📌 [APPSEC-1545] Stored XSS through customer group name in admin panel


📈 22.48 Punkte

📌 [APPSEC-2067] Admin to admin XSS in configurable custom attribute label


📈 21.08 Punkte

📌 [APPSEC-2066] Admin to Admin XSS in Catalog Attribute Media Label


📈 21.08 Punkte

📌 Mozilla Critical Services: Stored Xss on bugzilla.mozilla.org via comment edit feature from non-admin to admin.


📈 21.08 Punkte

📌 'I'm Admin. You're Admin. Everyone is Admin.' Remote Access Bug Turns Western Digital My Cloud Into Everyone's Cloud


📈 20.45 Punkte

📌 [PRODSECBUG-2162] Unauthorized data control due to a bypass of authentication controls for a customer using a web API endpoint


📈 18.78 Punkte

📌 [ PRODSECBUG-2125 ] CSRF on deletion of Blocks Vulnerability


📈 18.78 Punkte

📌 [PRODSECBUG-2057] Remote Code Execution in Upload of Quote File


📈 18.78 Punkte

📌 [PRODSECBUG-2113] Vulnerability in Customer Shopping Cart


📈 18.78 Punkte

📌 [PRODSECBUG-2069] Vulnerability in Attribute Group Name


📈 18.78 Punkte

📌 [ PRODSECBUG-2053 ] Vulnerability in Newsletter Template


📈 18.78 Punkte

📌 [PRODSECBUG-2148] Remote Code Execution and Arbitrary Move File


📈 18.78 Punkte

📌 [PRODSECBUG-2230] Data manipulation due to improper validation


📈 18.78 Punkte

📌 [PRODSECBUG-2285] Remote code execution via server side request forgery issued to Redis


📈 18.78 Punkte

📌 [PRODSECBUG-2273] Arbitrary code execution due to unsafe handling of a malicious product attribute configuration


📈 18.78 Punkte

📌 [PRODSECBUG-2277] SQL injection due to inadequate validation of user input


📈 18.78 Punkte

📌 [PRODSECBUG-2228] Sensitive Data Disclosure due to Insecure Direct Object References vulnerability


📈 18.78 Punkte

📌 [PRODSECBUG-2192] Remote code execution though crafted newsletter and email templates


📈 18.78 Punkte

📌 [PRODSECBUG-2192] Remote code execution though crafted newsletter and email templates


📈 18.78 Punkte

📌 I'm using WiFi through my computer, instead of through a router. Is this safe?


📈 16.44 Punkte

📌 through Crate up to 2021-02-18 on Rust through/through_and double free


📈 16.44 Punkte

📌 Anomali Cyber Watch: Symbiote Linux Backdoor is Hard to Detect, Aoqin Dragon Comes through Fake Removable Devices, China-Sponsored Groups Proxy through Compromised Routers, and More


📈 16.44 Punkte

📌 Gaining real-world industry experience through Break Through Tech AI at MIT


📈 16.44 Punkte

📌 Using a Read-through / Write-through Cache in Java Applications with NCache


📈 16.44 Punkte

📌 When bridging a network together through a non-internet facing server (Plex mostly) are their any security issues with routing internet traffic through the Ethernet card?


📈 16.44 Punkte











matomo

Kontakt

24/7 kontakt@tsecurity.de

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software