VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Oct 30, 2019· Updated Jun 17, 2026

CVE-2019-8235

CVE-2019-8235

Description

An insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 prior to 2.2.8, and 2.1 prior to 2.1.17 versions. An authenticated user may be able to view personally identifiable shipping details of another user due to insufficient validation of user controlled input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Magento/Magento3 versions
    cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*+ 2 more
    • cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*range: >=2.1.0,<2.1.17
    • cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*range: >=2.1.0,<2.1.17
    • (no CPE)range: <2.3.1, <2.2.8, <2.1.17
  • Adobe Inc./Magentov5
    Range: 2.3 prior to 2.3.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.