nopCommerce v4.2.0 allows privilege escalation via file upload in Presentation/Nop.Web/Admin/Areas/Controllers/PluginController.cs via Admin/FacebookAuthentication/Configure because it is possible to upload a crafted Facebook Auth plugin.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: mitre

Published: 2019-12-09T16:58:12

Updated: 2019-12-09T16:58:12

Reserved: 2019-12-09T00:00:00


Link: CVE-2019-19684

JSON object: View

cve-icon NVD Information

Status : Analyzed

Published: 2019-12-09T17:15:12.197

Modified: 2019-12-11T21:07:36.103


Link: CVE-2019-19684

JSON object: View

cve-icon Redhat Information

No data.

CWE