Magento Cross-Site Request Forgery (CSRF)

보통 6.5CVE-2018-5301 · GHSA-w3mq-67mw-3p9f · Published 08/01/2018 · updated 17/06/2026

요약

CVE-2018-5301은(는) magento/community-edition, magento (magento)에 영향을 주는 보통 (CVSS 6.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.43%, 전체 취약점의 37.3%보다 높음.
조치: 2.1.2, 2.0.10 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
magento/community-edition Packagist	`≥ 2.1.0, < 2.1.2< 2.0.10`	`2.1.22.0.10`
magento magento	`≥ 2.1.0, < 2.1.2< 2.0.10`	`2.1.22.0.10`

Description

Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433.

NVD description

Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433.

References

nvd.nist.gov/vuln/detail/CVE-2018-5301 · ADVISORY
magento/magento2 · PACKAGE
magento.com/security/patches/magento-2010-and-212-security-update · WEB

magento/community-edition의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

magento/community-edition

Packagist

≥ 2.1.0, < 2.1.2< 2.0.10

2.1.22.0.10

magento

≥ 2.1.0, < 2.1.2< 2.0.10

2.1.22.0.10

Description

Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433.

NVD description

Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433.

magento/community-edition의 다른 취약점

모두 보기 →