Lucene search
GoogleOSV:GHSA-2W26-GMQM-MC5PHistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Cryptographic Flaw
2022-05-2416:52:22
Google
osv.dev
5
0.001 Low
EPSS
Percentile
38.5%
A cryptograhic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could be abused by an unauthenticated user to discover an invariant used in gift card generation.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7855.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
nvd.nist.gov/vuln/detail/CVE-2019-7855
web.archive.org/web/20220121051916/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
Related
osv
osv
CVE-2019-7855
2019-08-02 22:15:14
cve
cve
CVE-2019-7855
2019-08-02 22:15:14
cvelist
cvelist
CVE-2019-7855
2019-08-02 21:11:55
friendsofphp
friendsofphp
prion
prion
Design/Logic Flaw
2019-08-02 22:15:00
nvd
nvd
CVE-2019-7855
2019-08-02 22:15:14
github
github
Magento 2 Community Cryptographic Flaw
2022-05-24 16:52:22
openvas
openvas