Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2022/05/24 4:52 p.m.•42 views

Magento 2 Community Edition SSRF vulnerability

A server-side request forgery SSRF vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with admin privileges to manipulate shipment methods to execute arbitrary code...

7.2CVSS7.6AI score0.01438EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2019/08/02 12:00 a.m.•6 views

PT-2019-18823

Name of the Vulnerable Software and Affected Versions Magento 2.1 versions prior to 2.1.18 Magento 2.2 versions prior to 2.2.9 Magento 2.3 versions prior to 2.3.2 Description A server-side request forgery SSRF issue exists, allowing an authenticated user with admin privileges to manipulate shipme...

7.2CVSS0.01438EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/02 12:00 a.m.•6 views

CVE-2019-7913: Server-Side Request Forgery (SSRF)

A server-side request forgery SSRF vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with admin privileges to manipulate shipment methods to execute arbitrary code...

7.2CVSS8.6AI score0.01438EPSS
SaveExploits0References2
Rows per page
Query Builder