CVE-2019-7864

An insecure direct object reference (IDOR) vulnerability exists in the RSS feeds of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior…

published August 2, 2019

CVSS
—
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

An insecure direct object reference (IDOR) vulnerability exists in the RSS feeds of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can lead to unauthorized access to order details.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00880 · 58.7th percentile
Published
2019-08-02T21:14Z
EPSS history
Timeline
  • 02 AUG 21:14Z
    An insecure direct object reference (IDOR) vulnerability exists in the RSS feeds of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior…
    cvelistv5