CVE-2019-7913

CVE-2019-7913 is a server-side request forgery (SSRF) in Magento. Affected are Magento 2.1 before 2.1.18, Magento 2.2 before 2.2.9, and Magento 2.3 before 2.3.2. The vulnerability can be exploited by an authenticated user with admin privileges to manipulate shipment methods and execute arbitrary ...