OpenMage magento-lts before 20.19.0 CSRF via PayPal Cancel Return Handlers
概要
OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery vulnerability in PayPal cancel and decline return handlers that trust only the checkout session without verifying the request came from PayPal. Attackers can lure a shopper into a cross-sit...
影響パッケージ
| パッケージ | 影響を受ける版 → 修正版 | |
|---|---|---|
| OpenMagemagento-lts |
21.0.0-beta1 以上 21.0.0-beta3 未満→ 21.0.0-beta3 |
21.0.0-beta3 |
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery vulnerability in PayPal cancel and decline return handlers that trust only the checkout session without verifying the request came from PayPal. Attackers can lure a shopper into a cross-site GET to paypal/standard/cancel to cancel their recent uninvoiced order, void pending authorizations, and restore items to the cart.
出典: CVE.org (CVE Program・cvelistV5) NVD