CVE-2018-5301

—

CVSS 3.0

6.5 medium

EPSS

<1%p36

Published

Jan 8, 2018 (Jan 8, 2018)

Modified

Jun 17, 2026

Description

Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433.

Vendors: magento
Products: magento
Ecosystems: E-commerce
Weakness: CWE-352
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.