CVE-2019-8229
First published: Tue Nov 05 2019(Updated: )
## Withdrawn Advisory This advisory has been withdrawn because the vulnerability does not affect a package in one of the GitHub Advisory Database's [supported ecosystems](https://github.com/github/advisory-database/blob/main/README.md#supported-ecosystems). This link is maintained to preserve external references. ## Original Description In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes can execute arbitrary code through crafted layout updates.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| composer/magento/community-edition | <1.9.4.3 | 1.9.4.3 |
| CentOS Libgcc | >=1.5.0.0<1.9.4.3 | |
| CentOS Libgcc | >=1.9.0.0<1.14.4.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-8229?
The CVE-2019-8229 vulnerability has been withdrawn and does not affect any supported packages.
Is CVE-2019-8229 applicable to Magento versions 1.9.4.0 and earlier?
CVE-2019-8229 has been determined to not apply to any Magento versions as the advisory was withdrawn.
How do I fix CVE-2019-8229?
Since CVE-2019-8229 has been withdrawn, no fix is required or applicable.
What products are affected by CVE-2019-8229?
CVE-2019-8229 does not affect any products, as the advisory regarding it has been withdrawn.
Can I still find information about CVE-2019-8229?
While CVE-2019-8229 was withdrawn, some archived references may still exist in security documentation.
- collector/github-advisory-latest
- alias/GHSA-w8vh-5v64-j3vr
- alias/CVE-2019-8229
- collector/github-advisory
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/last-modified-date
- agent/event
- agent/description
- agent/first-publish-date
- agent/trending
- agent/source
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-cve
- package-manager/composer
- vendor/magento
- canonical/centos libgcc
- version/centos libgcc/1.5.0.0
- version/centos libgcc/1.9.0.0