Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21160
HistoryAug 08, 2019 - 1:43 a.m.

Server Side Request Forgery (SSRF)

2019-08-0801:43:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

36.3%

magento/community-edition is vulnerable to server side request forgery (SSRF). The vulnerability exists as an admin can manipulate shipment settings to execute arbitrary code.

0.001 Low

EPSS

Percentile

36.3%