Adobe Stock API Integration vulnerabilities

2 CVEs affecting Adobe Stock API Integration, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19595, published 2019-12-05.

More from Adobe.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-19595, published 2019-12-05. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. reset/modules/advanced_form_maker_edit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execute arbitrary code by uploading a .php…
• CVE-2019-19594, published 2019-12-05. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. reset/modules/fotoliaFoto/multi_upload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary code by uploading a .php file.