Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 16:27:37 +0000 certfr-2019-avi-295 — De multiples vulnérabilités ont été découvertes dans les produits Magento. Certaines d'entre elles permettent à un atta… https://cve.radiocsirt.org/vuln/certfr-2019-avi-295 certfr-2019-avi-295 https://cve.radiocsirt.org/vuln/certfr-2019-avi-295 cnvd-2019-39395 https://cve.radiocsirt.org/vuln/cnvd-2019-39395 cnvd-2019-39395 https://cve.radiocsirt.org/vuln/cnvd-2019-39395 EUVD-2026-51706 https://cve.radiocsirt.org/vuln/euvd-2026-51706 EUVD-2026-51706 https://cve.radiocsirt.org/vuln/euvd-2026-51706 fkie_cve-2019-7872 https://cve.radiocsirt.org/vuln/fkie_cve-2019-7872 <p>An insecure direct object reference (IDOR) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to insufficient authorizations checks. This can be abused by a user with admin privileges to add users to company accounts or modify existing user details.</p> <p>An insecure direct object reference (IDOR) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to insufficient authorizations checks. This can be abused by a user with admin privileges to add users to company accounts or modify existing user details.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-7872 GHSA-pfxv-66r9-4gqw — Magento Insufficient authorization check when adding users to company accounts https://cve.radiocsirt.org/vuln/ghsa-pfxv-66r9-4gqw <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>An insecure direct object reference (IDOR) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to insufficient authorizations checks. This can be abused by a user with admin privileges to add users to company accounts or modify existing user details.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>An insecure direct object reference (IDOR) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 due to insufficient authorizations checks. This can be abused by a user with admin privileges to add users to company accounts or modify existing user details.</p> https://cve.radiocsirt.org/vuln/ghsa-pfxv-66r9-4gqw gsd-2019-7872 https://cve.radiocsirt.org/vuln/gsd-2019-7872 gsd-2019-7872 https://cve.radiocsirt.org/vuln/gsd-2019-7872