Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-7913

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-hppc-rpfp-r8qw

Magento 2 Community Edition SSRF vulnerability A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with admin privileges to manipulate shipment methods to execute arbitrary code.

gitlab/packagist/magento/community-edition/CVE-2019-7913

Server-Side Request Forgery (SSRF) A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with admin privileges to manipulate shipment methods to execute arbitrary code.