CVE-2023-41879

Magento LTS is the official OpenMage LTS codebase. Guest orders may be viewed without authentication using a "guest-view" cookie which contains the order's "protectcode". This code is 6 hexadecimal characters which is arguably not enough to prevent a brute-force attack. Exposing each order would...

PT-2023-28137 · Adobe · Magento-Lts

Name of the Vulnerable Software and Affected Versions: Magento LTS versions prior to 19.5.1 Magento LTS versions prior to 20.1.1 Description: The issue concerns the "guest-view" cookie in Magento LTS, which contains a 6 hexadecimal character protect code. This code is not sufficient to prevent...