Lucene search
GoogleOSV:GHSA-HPXV-VPFV-7JC9HistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition IDOR Vulnerability
2022-05-2416:52:23
Google
osv.dev
3
0.001 Low
EPSS
Percentile
50.0%
An insecure direct object reference (IDOR) vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unauthorized disclosure of company credit history details.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7854.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
nvd.nist.gov/vuln/detail/CVE-2019-7854
web.archive.org/web/20220121051916/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
Related
prion
prion
Design/Logic Flaw
2019-08-02 22:15:00
cvelist
cvelist
CVE-2019-7854
2019-08-02 21:11:32
cve
cve
CVE-2019-7854
2019-08-02 22:15:14
nvd
nvd
CVE-2019-7854
2019-08-02 22:15:14
osv
osv
CVE-2019-7854
2019-08-02 22:15:14
friendsofphp
friendsofphp
github
github
Magento 2 Community Edition IDOR Vulnerability
2022-05-24 16:52:23
openvas
openvas