CVE-2019-7888

An information disclosure vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2

published August 2, 2019

CVSS
—
EPSS
1%
Percentile
60.9
In the wild
Unconfirmed
What it is

An information disclosure vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to create email templates could leak sensitive data via a malicious email template.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00950 · 60.9th percentile
Published
2019-08-02T21:22Z
EPSS history
Timeline
  • 02 AUG 21:22Z
    An information disclosure vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2
    cvelistv5