Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-8112
HistoryNov 05, 2019 - 11:15 p.m.

Security feature bypass

2019-11-0523:15:00
PRIOn knowledge base
www.prio-n.com
3

0.001 Low

EPSS

Percentile

49.6%

A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can bypass the email confirmation mechanism via GET request that captures relevant account data obtained from the POST response related to new user creation.

0.001 Low

EPSS

Percentile

49.6%