Description
An arbitrary file access vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can leverage file upload controller for downloadable products to read/delete an arbitary files.
Remediation
References
Related Vulnerabilities
WordPress Plugin NextGEN Gallery-WordPress Gallery Security Bypass (3.1.6)
Joomla! Core 3.x.x Directory Traversal (3.2.0 - 3.4.5)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-13258)
Drupal Core 8.x Multiple Security Bypass Vulnerabilities (8.0.0 - 8.3.6)