VULNERABILITY INTELLIGENCE

CVE-2019-7855

CVSS score5.3 MEDIUM
EPSS probability0.97%
CISA KEVNot currently listed
Published2019-08-02
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

A cryptograhic flaw in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could be abused by an unauthenticated user to discover an invariant used in gift card generation.

Weakness classification

  • CWE-338: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Primary references