Description

A cross-site request forgery vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can result in unintended deletion of the store design schedule.

Remediation

References

CVE-2019-7873

Related Vulnerabilities

WordPress Plugin YITH PayPal Express Checkout for WooCommerce Security Bypass (1.2.5)

MySQL CVE-2012-0496 Vulnerability (CVE-2012-0496)

XWiki Other Vulnerability (CVE-2023-26478)

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1558)

WordPress Plugin Calendar Unspecified Vulnerability (1.3.10)

Severity

Medium

Classification

CVE-2019-7873 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities