CWE Code: 918
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Server-Side Request Forgery (SSRF)
Summary: a server-side request forgery (ssrf) vulnerability exists in magento 2.1 prior to 2.1.18, magento 2.2 prior to 2.2.9, magento 2.3 prior to 2.3.2. this can be exploited by an authenticated user with admin privileges to manipulate shipment methods to execute arbitrary code.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-08-02
Last Modified Date: 2019-08-07