Medium
Security advisory
An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. The logging feature required for effective monitoring did not contain sufficent data to effectively track configuration changes.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2019-8123
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 04:31 UTC · Revision 1
Source evidence
An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. The logging feature required for effective monitoring did not contain sufficent data to effectively track configuration changes.
osv:CVE-2019-8123
Complete source record
{
"id": "f83085fed949a36ed8986cd6ac9417c573b26594bec1db6c423e0e2e88e3ad1d",
"url": "https://osv.dev/vulnerability/CVE-2019-8123",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2019-8123",
"summary": "An insufficient logging and monitoring vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. The logging feature required for effective monitoring did not contain sufficent data to effectively track configuration changes.",
"evidence": "osv:CVE-2019-8123",
"products": [],
"severity": "medium",
"structured": {
"id": "CVE-2019-8123",
"aliases": [
"CVE-2019-8123",
"GHSA-fp5m-4mqh-849p"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/magento/devdocs",
"type": "GIT",
"events": [
{
"introduced": "239bfc72e116f6814ff6c2f6731f0830f3bcf61c"
},
{
"fixed": "fe462f46d5efe781681fa25067a180b19e0e35de"
},
{
"introduced": "75da24b3b0fb950648d00e7454dae0bb7da64c30"
},
{
"last_affected": "452b21aa6d3a221b587ca32d2d50785d92dd6aa1"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
"range": [
{
"introduced": "2.2.0"
},
{
"fixed": "2.2.10"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
"range": [
{
"introduced": "2.2.0"
},
{
"fixed": "2.2.10"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
"range": [
{
"introduced": "2.3.0"
},
{
"last_affected": "2.3.2"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
"range": [
{
"introduced": "2.3.0"
},
{
"last_affected": "2.3.2"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"2.3.0",
"2.2.7",
"2.1.16",
"2.3.2",
"2.2.9",
"2.1.18",
"2.3.1",
"2.2.8",
"2.1.17"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-8123.json"
}
},
{
"ranges": [
{
"repo": "https://github.com/magento/magento2",
"type": "GIT",
"events": [
{
"introduced": "07465f8ce879ff0bd0ba72a662c9e2473e49afe4"
},
{
"fixed": "2dd1e1a37a798fd7fd08d6894eb37bcccc99d1c6"
},
{
"introduced": "f4c1d7526f05bdfb1327b0701cc345f94aadcaed"
},
{
"last_affected": "ddf42caaf25311f10b23b95a92746f99943e045e"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
"range": [
{
"introduced": "2.2.0"
},
{
"fixed": "2.2.10"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
"range": [
{
"introduced": "2.2.0"
},
{
"fixed": "2.2.10"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
"range": [
{
"introduced": "2.3.0"
},
{
"last_affected": "2.3.2"
}
],
"source": "CPE_RANGE"
},
{
"cpe": "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
"range": [
{
"introduced": "2.3.0"
},
{
"last_affected": "2.3.2"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"2.3.2",
"2.3.1",
"2.3.0"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-8123.json"
}
}
],
"modified": "2026-10-24T10:30:19.411962744Z",
"provider": "osv",
"references": [
"https://magento.com/security/patches/supee-11219"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
"cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*"
],
"vendor_product": "magento:magento",
"extracted_events": [
{
"range": [
{
"fixed": "1.9.3.4"
},
{
"fixed": "1.9.3.4"
},
{
"fixed": "1.14.4.3"
},
{
"fixed": "1.14.4.3"
}
],
"source": "CPE_RANGE"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2019-8123",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 430017,
"published_at": "2019-11-05T23:15:12.57+00:00"
}