VULNERABILITY INTELLIGENCE

CVE-2019-7899

CVSS score5.3 MEDIUM
EPSS probability0.93%
CISA KEVNot currently listed
Published2019-08-02
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Names of disabled downloadable products could be disclosed due to inadequate validation of user input in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references