Description
Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | magento/community-edition | < 2.0.10 | 2.0.10 | GHSA-w3mq-67mw-3p9f |
| Packagist | magento/community-edition | >= 2.1.0, < 2.1.2 | 2.1.2 | GHSA-w3mq-67mw-3p9f |