CVE-2019-7890

An Insecure Direct Object Reference (IDOR) vulnerability exists in the order processing workflow of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9…

published August 2, 2019

CVSS
—
EPSS
1%
Percentile
57.3
In the wild
Unconfirmed
What it is

An Insecure Direct Object Reference (IDOR) vulnerability exists in the order processing workflow of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can lead to unauthorized access to order details.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00836 · 57.3th percentile
Published
2019-08-02T21:22Z
EPSS history
Timeline
  • 02 AUG 21:22Z
    An Insecure Direct Object Reference (IDOR) vulnerability exists in the order processing workflow of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9…
    cvelistv5