Lucene search
GoogleOSV:GHSA-WMRG-W9VG-7JQXHistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition CSRF Vulnerability
2022-05-2416:52:23
Google
osv.dev
3
0.001 Low
EPSS
Percentile
31.5%
A cross-site request forgery (CSRF) vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7865.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
nvd.nist.gov/vuln/detail/CVE-2019-7865
web.archive.org/web/20220121011306/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-33
Related
github
github
Magento 2 Community Edition CSRF Vulnerability
2022-05-24 16:52:23
prion
prion
Cross site request forgery (csrf)
2019-08-02 22:15:00
osv
osv
CVE-2019-7865
2019-08-02 22:15:15
cvelist
cvelist
CVE-2019-7865
2019-08-02 21:15:08
nvd
nvd
CVE-2019-7865
2019-08-02 22:15:15
friendsofphp
friendsofphp
PRODSECBUG-2187: Cross-site request forgery (CSRF) in checkout cart item
2019-06-25 00:00:00
cve
cve
CVE-2019-7865
2019-08-02 22:15:15
openvas
openvas