CVE-2019-8121: Critical severity centos libgcc vulnerability
An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Magento 2 codebase leveraged outdated versions of JS libraries (Bootstrap, jquery, Knockout) with known security vulnerabilities.
Other sources
PRODSECBUG-2447: Using JS libraries with known security vulnerabilities
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-8121?
CVE-2019-8121 has been categorized as a high severity vulnerability due to the potential exploitation of insecure JavaScript libraries.
How do I fix CVE-2019-8121?
To fix CVE-2019-8121, upgrade your Magento installation to version 2.1.19, 2.2.10, or 2.3.3 or later.
Which versions of Magento are affected by CVE-2019-8121?
CVE-2019-8121 affects Magento versions 2.1.x before 2.1.19, 2.2.x before 2.2.10, and 2.3.x before 2.3.3.
What type of vulnerability is CVE-2019-8121?
CVE-2019-8121 is an insecure component vulnerability caused by the use of outdated JavaScript libraries.
Are there any specific security libraries involved in CVE-2019-8121?
Yes, CVE-2019-8121 involves outdated versions of Bootstrap, jQuery, and Knockout libraries known to have security weaknesses.