Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-8235

An insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 prior to 2.2.8, and 2.1 prior to 2.1.17 versions. An authenticated user may be ab

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
adobe

Description

An insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 prior to 2.2.8, and 2.1 prior to 2.1.17 versions. An authenticated user may be able to view personally identifiable shipping details of another user due to insufficient validation of user controlled input.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Magento

  • 2.3 prior to 2.3.1affected
  • 2.2 prior to 2.2.8affected
  • 2.1 prior to 2.1.17affected

References