Security Advisory

CVE-2019-19684

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-12-09 16:58:12

Last updated 2024-08-05 02:25:12

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

nopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs via Admin/FacebookAuthentication/Configure because it is possible to upload a crafted Facebook Auth plugin.

← Browse all CVEs View on cve.org ↗