Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 4:52 p.m.24 views

Magento 2 Community Edition Session Fixation Check

A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules. This impacts Magento 1.x prior to 1.9.4.2, Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2...

7.5CVSS6.9AI score0.00048EPSS
Exploits0References7Affected Software1
NVD
NVD
added 2019/08/02 10:15 p.m.15 views

CVE-2019-7849

A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules. This impacts Magento 1.x prior to 1.9.4.2, Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2...

7.5CVSS7.4AI score0.00048EPSS
Exploits0References1
OSV
OSV
added 2019/08/02 10:15 p.m.17 views

CVE-2019-7849

A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules. This impacts Magento 1.x prior to 1.9.4.2, Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2...

7.5CVSS6.7AI score
Exploits0References1
Prion
Prion
added 2019/08/02 10:15 p.m.15 views

Design/Logic Flaw

A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules. This impacts Magento 1.x prior to 1.9.4.2, Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2...

5CVSS7.5AI score0.00048EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder