Description
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to unauthorized access to admin panel.
Remediation
References
Related Vulnerabilities
PHP Other Vulnerability (CVE-2007-0909)
MyBB Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-5131)
WordPress Plugin WPtouch Multiple Cross-Site Scripting Vulnerabilities (3.7.3)
WordPress Plugin Admin Columns Pro Cross-Site Scripting (5.5.1)
WordPress Plugin Amazon Product in a Post SQL Injection (3.5.2)