CVE-2019-8155

Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request

published November 5, 2019

CVSS
—
EPSS
0%
Percentile
41.8
In the wild
Unconfirmed
What it is

Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. This could be exploited by an attacker with access to network traffic to perform unauthorized actions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00499 · 41.8th percentile
Published
2019-11-05T23:52Z
EPSS history
Timeline
  • 05 NOV 23:52Z
    Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request
    cvelistv5