Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2019-7951

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-5j25-5hjr-w7m2

Magento 2 Community Edition Information Leak An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A SOAP web service endpoint does not properly enforce parameters related to access control. This could be abused to leak customer information via crafted SOAP requests.

gitlab/packagist/magento/community-edition/CVE-2019-7951

Magento 2 Community Edition Information Leak An information leakage vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. A SOAP web service endpoint does not properly enforce parameters related to access control. This could be abused to leak customer information via crafted SOAP requests.