Lucene search

K
osvGoogleOSV:CVE-2019-7865
HistoryAug 02, 2019 - 10:15 p.m.

CVE-2019-7865

2019-08-0222:15:15
Google
osv.dev
3

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

A cross-site request forgery (CSRF) vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration.

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%