CVE-2019-13594

CVE-2019-13594 describes a critical Cross-Site Request Forgery (CSRF) vulnerability in Mirumee Saleor versions prior to 2.8.0, where the CSRF protection middleware was inadvertently disabled. This flaw allows unauthenticated attackers to send malicious POST requests that the server would accept without a valid CSRF token. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk, as it can lead to high impact on confidentiality, integrity, and availability through a low-complexity attack requiring user interaction. While no public exploits, Metasploit modules, or Nuclei templates are available, and there is no evidence of active exploitation or significant community discussion, the potential for severe compromise remains.