{"id":"CVE-2019-8090","state":"PUBLISHED","title":"An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated users can manipulate the d","description":"An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated users can manipulate the design layout update feature.","publishedAt":"2019-11-05T21:53:32.000Z","updatedAt":"2024-08-04T21:10:32.544Z","severity":null,"assigner":"adobe","products":["Adobe Systems Incorporated Magento 2"],"affected":[{"vendor":"Adobe Systems Incorporated","product":"Magento 2","versions":[{"version":"Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p2","status":"affected"}]}],"references":["https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update"],"weaknesses":[],"ingestedAt":"2026-10-29T19:46:12.199Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/8xxx/CVE-2019-8090.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-8090","state":"PUBLISHED","datePublished":"2019-11-05T21:53:32.000Z","dateUpdated":"2024-08-04T21:10:32.544Z","assignerShortName":"adobe","assignerOrgId":"078d4453-3bcd-4900-85e6-15281da43538","dateReserved":"2019-02-12T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated users can manipulate the design layout update feature."}],"affected":[{"vendor":"Adobe Systems Incorporated","product":"Magento 2","versions":[{"version":"Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p2","status":"affected"}]}],"references":[{"url":"https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Arbitrary File Deletion","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"adobe","dateUpdated":"2019-11-05T21:53:32.000Z","orgId":"078d4453-3bcd-4900-85e6-15281da43538"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@adobe.com","ID":"CVE-2019-8090","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Magento 2","version":{"version_data":[{"version_value":"Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p2"}]}}]},"vendor_name":"Adobe Systems Incorporated"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated users can manipulate the design layout update feature."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Arbitrary File Deletion"}]}]},"references":{"reference_data":[{"name":"https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update","refsource":"MISC","url":"https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T21:10:32.544Z"}}]}}}