CVE-2019-8093

CVE-2019-8093 is an arbitrary file access vulnerability affecting Magento versions 2.2 prior to 2.2.10 and 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can exploit a file upload controller within downloadable products to read or delete arbitrary files on the system. This vulnerability carries a high CVSS score of 8.8, indicating a critical risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. While no public exploit intelligence like Metasploit modules or ExploitDB entries are available, and there's no evidence of active exploitation or significant community discussion, the potential for severe damage necessitates patching.