Lucene search
GoogleOSV:GHSA-HVCP-JVX5-4PMPHistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition SSRF vulnerability
2022-05-2416:52:27
Google
osv.dev
1
0.001 Low
EPSS
Percentile
36.3%
A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by authenticated user with admin privileges to manipulate shipment settings to execute arbitrary code.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7923.yaml
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
nvd.nist.gov/vuln/detail/CVE-2019-7923
web.archive.org/web/20211206084839/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
Related
prion
prion
Server side request forgery (ssrf)
2019-08-02 22:15:00
nvd
nvd
CVE-2019-7923
2019-08-02 22:15:18
github
github
Magento 2 Community Edition SSRF vulnerability
2022-05-24 16:52:27
friendsofphp
friendsofphp
cvelist
cvelist
CVE-2019-7923
2019-08-02 21:28:36
veracode
veracode
Server Side Request Forgery (SSRF)
2019-08-08 01:43:07
osv
osv
CVE-2019-7923
2019-08-02 22:15:18
cve
cve
CVE-2019-7923
2019-08-02 22:15:18
openvas
openvas