Vulnerability in Magento

CVE-2019-7915

A denial-of-service vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Under certain conditions, an unauthenticated attacker could force the Magento store's full page cache to serve a 404 page to customers.

EPSS: 0.012 (64.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

  • Magento
  • N/a Magento 2 — versions Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2

References

Frequently asked questions

What is CVE-2019-7915?
CVE-2019-7915 is a high-severity vulnerability in Magento. CVSS score: 7.5/10. Published 2019-08-02.
How severe is CVE-2019-7915?
High severity. CVSS v3 base score is 7.5 out of 10.