Description
A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of user roles.
Remediation
References
Related Vulnerabilities
MediaWiki Incorrect Authorization Vulnerability (CVE-2021-36132)
Joomla! Core 3.x.x Security Bypass (3.8.0 - 3.9.3)
MySQL CVE-2021-35633 Vulnerability (CVE-2021-35633)
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2007-5899)
WordPress Plugin WP Human Resource Management Security Bypass (2.2.14)