magento/magento2 · Security
Magento Insecure Direct Object Reference (IDOR) vulnerability
- GHSA ID
- GHSA-7g5j-q8qj-8984
- CVE ID
- CVE-2019-7925
- Severity
- medium
- Published
- Updated
- CVSS
- 4.9 · CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
- CVSS v3
- 4.9 · CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Description
An insecure direct object reference (IDOR) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an administrator with limited privileges to delete the downloadable products folder.
CWEs
- CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
References
- https://nvd.nist.gov/vuln/detail/CVE-2019-7925 ↗
- https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23 ↗
- https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7925.yaml ↗
- https://github.com/advisories/GHSA-7g5j-q8qj-8984 ↗