CVE-2019-7923

A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by authenticated user with admin privileges to manipulate shipment settings to execute arbitrary code.
Configurations

Configuration 1

cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*
cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*
cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*

Information

Published : 2019-08-02 10:15

Updated : 2019-08-07 02:16


NVD link : CVE-2019-7923

Mitre link : CVE-2019-7923

Products Affected
No products.
CWE
CWE-918

Server-Side Request Forgery (SSRF)