CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Information Exposure
Summary: an information disclosure vulnerability exists in magento 2.1 prior to 2.1.18, magento 2.2 prior to 2.2.9, magento 2.3 prior to 2.3.2. an authenticated user with privileges to create email templates could leak sensitive data via a malicious email template.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2019-08-02
Last Modified Date: 2019-08-07