CVE-2019-7854

2019-08-0221:11:32

adobe

www.cve.org

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.0%

JSON

An insecure direct object reference (IDOR) vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unauthorized disclosure of company credit history details.

CNA Affected

[
  {
    "product": "Magento 2",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2"
      }
    ]
  }
]