Magento Commerce vulnerabilities

1 known vulnerability affecting magento/magento_commerce.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2019-7139CRITICALCVSS 9.8PoCvprior to 1.14.4.12019-04-10

CVE-2019-7139 [CRITICAL] CWE-89 CVE-2019-7139: An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlyin An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. This issue is fixed in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.