Magento CMS APIs Cross-Site Request Forgery Vulnerability
BID:98791
Info
Magento CMS APIs Cross-Site Request Forgery Vulnerability
| Bugtraq ID: | 98791 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 31 2017 12:00AM |
| Updated: | May 31 2017 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: |
Magento Enterprise Edition 2.1.6 Magento Enterprise Edition 2.1.2 Magento Enterprise Edition 2.0.6 Magento Enterprise Edition 2.0.5 Magento Enterprise Edition 2.0.4 Magento Enterprise Edition 2.0.3 Magento Enterprise Edition 2.0.2 Magento Enterprise Edition 2.0.1 Magento Community Edition 2.0.6 Magento Community Edition 2.0.5 Magento Community Edition 2.0.4 Magento Community Edition 2.0.3 Magento Community Edition 2.0.2 Magento Community Edition 2.1.6 Magento Community Edition 2.0.1 |
| Not Vulnerable: |
Magento Enterprise Edition 2.1.7 Magento Enterprise Edition 2.0.14 Magento Community Edition 2.1.7 Magento Community Edition 2.0.14 |
Exploit / POC
Magento CMS APIs Cross-Site Request Forgery Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Magento CMS APIs Cross-Site Request Forgery Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.