Lucene search

K
osvGoogleOSV:CVE-2019-13594
HistoryJul 14, 2019 - 5:15 p.m.

CVE-2019-13594

2019-07-1417:15:11
Google
osv.dev
5

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

31.5%

In Mirumee Saleor 2.7.0 (fixed in 2.8.0), CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid CSRF token and be accepted by the server.

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

31.5%

Related for OSV:CVE-2019-13594