Description
A cross-site request forgery (CSRF) vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration.
Remediation
References
Related Vulnerabilities
WordPress Plugin zeList Directory Cross-Site Scripting (0.5.11.07)
WordPress Plugin Echo Sign Multiple Cross-Site Scripting Vulnerabilities (1.1)
IBM WebSEAL URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-4153)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0113)