Security Advisory
CVE-2019-7857
4.3
MEDIUM
Vulnerability Description
A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can cause unwanted items to be added to a shopper's cart due to an insufficiently robust anti-CSRF token implementation.
Published Date
August 2, 2019
Official Source
NIST NVD Advisory