Vulnerability Database

296,748

Total vulnerabilities in the database

CVE-2019-8155

Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. This could be exploited by an attacker with access to network traffic to perform unauthorized actions.

  • Published: Nov 6, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-8155
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
magento / magento 1.9.0.0 1.14.4.3
magento / magento 1.5.0.0 1.9.4.3