Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2019-7851

A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages.

VectorNETWORK

PublishedAug 02, 2019, 22:15

Published Bypsirt@adobe.com

Base Score

Score6.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

magento/community-edition(Packagist)2.1.02.1.18N/A

magento/community-edition(Packagist)2.2.02.2.9N/A

magento/community-edition(Packagist)2.3.02.3.2N/A

References

https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33

Weakness Type

CWE-352

CVSS Metrics

Base Score

6.5

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Base SeverityMedium

Version

3.0

Attack Vector (AV)

NETWORK