Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433.
Max CVSS
6.5
EPSS Score
0.06%
Published
2018-01-08
Updated
2018-02-02
1 vulnerabilities found