Severity
- CVSS 3.x
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/magento/devdocs ↗ | |
| 60523b1194f96e18c94c82b5515b0274b30e2151 to before 80eeb710af69c32b8819310cf24fcf86bb7b9bef | 80eeb710af69c32b8819310cf24fcf86bb7b9bef |
| 239bfc72e116f6814ff6c2f6731f0830f3bcf61c to before 80eeb710af69c32b8819310cf24fcf86bb7b9bef | 80eeb710af69c32b8819310cf24fcf86bb7b9bef |
| 75da24b3b0fb950648d00e7454dae0bb7da64c30 to before 80eeb710af69c32b8819310cf24fcf86bb7b9bef | 80eeb710af69c32b8819310cf24fcf86bb7b9bef |
Also listed as affected (3)
| |
| GIT github.com/magento/magento2 ↗ | |
| 909a2d7e8c2ac5ca55359827c22cea93fdb719df to before 1f9186c3b9a96c5e642fd5d3d31ac5c7e1877d2b | 1f9186c3b9a96c5e642fd5d3d31ac5c7e1877d2b |
| 07465f8ce879ff0bd0ba72a662c9e2473e49afe4 to before 0c786907ffe03d0e2990612eec16ee58b00379c5 | 0c786907ffe03d0e2990612eec16ee58b00379c5 |
| f4c1d7526f05bdfb1327b0701cc345f94aadcaed to before 36097739bbb0b8939ad9a2a0dadee64318153dca | 36097739bbb0b8939ad9a2a0dadee64318153dca |
Also listed as affected (18)
| |
Description
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. This issue is fixed in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.