PT-2019-18824 · Adobe · Magento

Publicado 2019-08-02 · Atualizado 2022-05-24 · CVE-2019-7915

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Magento 2.1 prior to 2.1.18 Magento 2.2 prior to 2.2.9 Magento 2.3 prior to 2.3.2

Description A denial-of-service issue exists, allowing an unauthenticated attacker to force the Magento store's full page cache to serve a 404 page to customers under certain conditions.

Recommendations For Magento 2.1 prior to 2.1.18, update to version 2.1.18 or later. For Magento 2.2 prior to 2.2.9, update to version 2.2.9 or later. For Magento 2.3 prior to 2.3.2, update to version 2.3.2 or later.

Exploit

Correção

Identificadores relacionados

CVE-2019-7915

GHSA-PRW8-GQWP-F7FH

Produtos afetados

Magento

Referências · 8

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7915.yaml · Exploit
• https://github.com/magento/magento2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-7915 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-7915 · Aviso do Fabricante
• https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-prw8-gqwp-f7fh · Aviso do Fabricante
• https://web.archive.org/web/20211206084839/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7915 · Nota