CVE-2019-8155

State: PUBLISHED · Published: 2019-11-05 · Updated: 2024-08-04 · Assigner: adobe

Description

Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. This could be exploited by an attacker with access to network traffic to perform unauthorized actions.

CWE

(none)

Affected

Adobe Systems Incorporated / Magento 1 — v=Magento Open Source prior to 1.9.4.3 [affected]; v=Magento Commerce prior to 1.14.4.3 [affected]

CVSS

(none)

References

https://magento.com/security/patches/supee-11219 x_refsource_MISC

Source

cvelistV5-main/cves/2019/8xxx/CVE-2019-8155.json