CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Its EPSS score suggests a 15.4% probability of exploitation in the next 30 days. Exploitation may require the attacker to be authenticated.
CVE
CVE-2019-7139
Severity
CRITICAL
CVSS
9.8
EPSS
15.45%
Original NVD Description
An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. This issue is fixed in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.
Related CVEs
Other vulnerabilities affecting the same vendor(s)