CVE-2019-7890

An Insecure Direct Object Reference (IDOR) vulnerability exists in the order processing workflow of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can lead to unauthorized access to order details.

Score

CVSS 3.0 7.3 High

Status

Modified - psirt@adobe.com

Published

2019-08-02

Last modified

2024-08-04

Weaknesses

CWE-639

Affected products

• Magento (Magento)

References

• https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23