| Package | Affected versions | Patched versions |
|---|---|---|
| magento | ≥ 2.1.0, < 2.1.17≥ 2.2.0, < 2.2.8≥ 2.3.0, < 2.3.1 | 2.1.172.2.82.3.1 |
An insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 prior to 2.2.8, and 2.1 prior to 2.1.17 versions. An authenticated user may be able to view personally identifiable shipping details of another user due to insufficient validation of user controlled input.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free