In breve
- CVE-2019-7939 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda magento/community-edition, magento (magento).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.0%, superiore al 64.1% delle vulnerabilità.
- Correzione: aggiornare a 2.1.18, 2.2.9, 2.3.2 o successiva.
| Package | Affected versions | Patched versions |
|---|
| magento/community-edition Packagist | ≥ 2.1, < 2.1.18≥ 2.2, < 2.2.9≥ 2.3, < 2.3.2
| 2.1.182.2.92.3.2
|
| magento | ≥ 2.1.0, < 2.1.18≥ 2.2.0, < 2.2.9≥ 2.3.0, < 2.3.2
| 2.1.182.2.92.3.2
|
Description
A reflected cross-site scripting vulnerability exists on the customer cart checkout page of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by sending a victim a crafted URL that results in malicious javascript execution in the victim's browser.
NVD description
A reflected cross-site scripting vulnerability exists on the customer cart checkout page of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by sending a victim a crafted URL that results in malicious javascript execution in the victim's browser.
Altre vulnerabilità di magento/community-edition
Vedi tutto →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free