Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-7139

An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. This issue is fixed in Magento

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
adobe

Description

An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. This issue is fixed in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Magento Magento Open Source

  • prior to 1.9.4.1affected

Magento Magento Commerce

  • prior to 1.14.4.1affected

Magento Magento

  • prior to 2.1.17affected
  • prior to 2.2.8affected
  • prior to 2.3.1affected

References