GoogleOSV:GHSA-VQXQ-3WQV-R9XPMagento 2 Community Edition Information Disclosure
0.001 Low
EPSS
Percentile
35.9%
Samples of disabled downloadable products are accessible in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to inadequate validation of user input.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ce/CVE-2019-7898.yaml
github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ee/CVE-2019-7898.yaml
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7898.yaml
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
nvd.nist.gov/vuln/detail/CVE-2019-7898
web.archive.org/web/20220121051916/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
Related
