Description

A cross-site request forgery vulnerability exists in the GiftCardAccount removal feature for Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.

Remediation

References

CVE-2019-7947

Related Vulnerabilities

SharePoint CVE-2019-1201 Vulnerability (CVE-2019-1201)

Jenkins Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2021-21607)

WordPress Plugin AJS Instagram Feed Cross-Site Scripting (1.0)

WordPress Plugin Easy Registration Forms Unspecified Vulnerability (1.8.4)

Atlassian Confluence Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-22522)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities CWE-352 CVE-2019-7947