Description
A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can cause unwanted items to be added to a shopper's cart due to an insufficiently robust anti-CSRF token implementation.
Remediation
References
Related Vulnerabilities
WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.20)
Liferay DXP Insecure Default Initialization of Resource Vulnerability (CVE-2024-25610)
WordPress Plugin WP User Manager-User Profile Builder & Membership Security Bypass (2.6.2)
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-8623)