Session fixation

2017-12-3021:29:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.4%

JSON

Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have XSS via e-mail templates that are mishandled during a preview, aka APPSEC-1503.

CPENameOperatorVersion
magentolt2.0.10
magentolt2.0.10
magentoge2.1.0
magentolt2.1.2
magentoge2.1.0
magentolt2.1.2

Name	Operator	Version
magento	lt	2.0.10
magento	lt	2.0.10
magento	ge	2.1.0
magento	lt	2.1.2
magento	ge	2.1.0
magento	lt	2.1.2

References

magento.com/security/patches/magento-2010-and-212-security-update