Cross-Site Request Forgery Vulnerability in Magento 2.1, 2.2, and 2.3

Cross-Site Request Forgery Vulnerability in Magento 2.1, 2.2, and 2.3

CVE-2019-7873 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:P

A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of the store design schedule.

Learn more about our Web Application Penetration Testing UK.