Lucene search
AdobeCVELIST:CVE-2019-8235HistoryOct 29, 2019 - 11:05 p.m.
CVE-2019-8235
2019-10-2923:05:56
adobe
www.cve.org
0.001 Low
EPSS
Percentile
26.9%
An insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 prior to 2.2.8, and 2.1 prior to 2.1.17 versions. An authenticated user may be able to view personally identifiable shipping details of another user due to insufficient validation of user controlled input.
CNA Affected
[
{
"product": "Magento",
"vendor": "Adobe",
"versions": [
{
"status": "affected",
"version": "2.3 prior to 2.3.1"
},
{
"status": "affected",
"version": "2.2 prior to 2.2.8"
},
{
"status": "affected",
"version": "2.1 prior to 2.1.17"
}
]
}
]Related
osv
osv
CVE-2019-8235
2019-10-30 00:15:12
prion
prion
Input validation
2019-10-30 00:15:00
nvd
nvd
CVE-2019-8235
2019-10-30 00:15:12
cve
cve
CVE-2019-8235
2019-10-30 00:15:12
openvas
openvas
Magento 2.x Multiple Vulnerabilities (Mar 2019)
2019-03-29 00:00:00