CVE-2019-7854

An insecure direct object reference (IDOR) vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to…

published August 2, 2019

CVSS
—
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

An insecure direct object reference (IDOR) vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unauthorized disclosure of company credit history details.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01143 · 66.4th percentile
Published
2019-08-02T21:11Z
EPSS history
Timeline
  • 02 AUG 21:11Z
    An insecure direct object reference (IDOR) vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to…
    cvelistv5