CVE-2019-7854

HIGH · CVSS 7.5 EPSS 1.14%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-08-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-7854

Severity

HIGH

CVSS

7.5

EPSS

1.14%

Original NVD Description

An insecure direct object reference (IDOR) vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unauthorized disclosure of company credit history details.