AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-8235

MEDIUM · CVSS 6.5 EPSS 1.88%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-10-30 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2019-8235
Severity
MEDIUM
CVSS
6.5
EPSS
1.88%

Original NVD Description

An insecure direct object reference (IDOR) vulnerability exists in Magento 2.3 prior to 2.3.1, 2.2 prior to 2.2.8, and 2.1 prior to 2.1.17 versions. An authenticated user may be able to view personally identifiable shipping details of another user due to insufficient validation of user controlled input.