Description
A cross-site request forgery vulnerability in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 can lead to unintended data deletion from customer pages.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Magento 2 | Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | magento/community-edition | >= 2.1.0, < 2.1.18 | 2.1.18 | GHSA-mhvf-j94g-3qp7 |
| Packagist | magento/community-edition | >= 2.2.0, < 2.2.9 | 2.2.9 | GHSA-mhvf-j94g-3qp7 |
| Packagist | magento/community-edition | >= 2.3.0, < 2.3.2 | 2.3.2 | GHSA-mhvf-j94g-3qp7 |