CVE-2018-5301

CVE-2018-5301 affects Magento Community Edition and Enterprise Edition prior to versions 2.0.10 and 2.1.x prior to 2.1.2. The issue is a Cross-Site Request Forgery (CSRF) that can result in the deletion of a customer address from the address book. The root cause is CSRF in the request flow leadin...