Lucene search
GoogleOSV:GHSA-3PGC-7JF3-5X5GHistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition IDOR Vulnerability
2022-05-2416:52:26
Google
osv.dev
8
0.001 Low
EPSS
Percentile
48.4%
An Insecure Direct Object Reference (IDOR) vulnerability exists in the order processing workflow of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can lead to unauthorized access to order details.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7890.yaml
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
nvd.nist.gov/vuln/detail/CVE-2019-7890
web.archive.org/web/20220121051916/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
Related
prion
prion
Design/Logic Flaw
2019-08-02 22:15:00
friendsofphp
friendsofphp
github
github
Magento 2 Community Edition IDOR Vulnerability
2022-05-24 16:52:26
osv
osv
CVE-2019-7890
2019-08-02 22:15:16
cvelist
cvelist
CVE-2019-7890
2019-08-02 21:22:50
nvd
nvd
CVE-2019-7890
2019-08-02 22:15:16
cve
cve
CVE-2019-7890
2019-08-02 22:15:16
veracode
veracode
Authorization Bypass
2019-08-13 06:25:07
openvas
openvas