Lucene search
GoogleOSV:GHSA-MHVF-J94G-3QP7HistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition CSRF vulnerability
2022-05-2416:52:22
Google
osv.dev
3
0.001 Low
EPSS
Percentile
27.8%
A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7851.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
nvd.nist.gov/vuln/detail/CVE-2019-7851
web.archive.org/web/20220121011306/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
Related
nvd
nvd
CVE-2019-7851
2019-08-02 22:15:14
osv
osv
CVE-2019-7851
2019-08-02 22:15:14
cve
cve
CVE-2019-7851
2019-08-02 22:15:14
prion
prion
Cross site request forgery (csrf)
2019-08-02 22:15:00
cvelist
cvelist
CVE-2019-7851
2019-08-02 21:10:29
friendsofphp
friendsofphp
PRODSECBUG-2125: Deletion of Blocks via cross-site request forgery (CSRF)
2019-06-25 00:00:00
github
github
Magento 2 Community Edition CSRF vulnerability
2022-05-24 16:52:22
openvas
openvas