Description
A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Dependency injection through Symphony framework allows service identifiers to be derived from user controlled data, which can lead to remote code execution.
Remediation
References
Related Vulnerabilities
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.26)
MySQL CVE-2022-21484 Vulnerability (CVE-2022-21484)
WordPress Plugin Social Hashtags Cross-Site Scripting (3.0.0)
Atlassian Jira Incorrect Authorization Vulnerability (CVE-2021-43948)
WordPress Improper Privilege Management Vulnerability (CVE-2020-28035)