Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-7890
HistoryAug 02, 2019 - 10:15 p.m.

Design/Logic Flaw

2019-08-0222:15:00
PRIOn knowledge base
www.prio-n.com
5

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.4%

An Insecure Direct Object Reference (IDOR) vulnerability exists in the order processing workflow of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can lead to unauthorized access to order details.

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.4%