Lucene search
Veracode Vulnerability DatabaseVERACODE:21158HistoryAug 08, 2019 - 1:36 a.m.
Authorization Bypass
2019-08-0801:36:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
38.6%
magento/community-edition is vulnerable to authorization bypass. The vulnerability exists due to an insecure direct object reference issue where the downloadable products folder can be deleted.
Related
osv
osv
CVE-2019-7925
2019-08-02 22:15:18
cvelist
cvelist
CVE-2019-7925
2019-08-02 21:29:03
github
github
Magento Insecure Direct Object Reference (IDOR) vulnerability
2022-05-24 16:52:27
nvd
nvd
CVE-2019-7925
2019-08-02 22:15:18
cve
cve
CVE-2019-7925
2019-08-02 22:15:18
prion
prion
Design/Logic Flaw
2019-08-02 22:15:00
friendsofphp
friendsofphp
openvas
openvas