CVE-2015-8707 describes a critical vulnerability in Magento CE before 1.9.2.2 and Magento EE before 1.14.2.2, where password reset tokens are transmitted via GET requests and remain valid after use. This flaw allows remote attackers to compromise user accounts by intercepting these tokens through a crafted external service that can access the referrer field. With a CVSS v3 score of 9.8 (CRITICAL), this vulnerability poses a significant risk due to its network-based attack vector, low attack complexity, and high potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, the vulnerability has garnered substantial community discussion with 10 mentions, indicating awareness among security professionals.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.9.2.1CPE matchmatch criteria | cpe:2.3:a:magento:magento:*:*:*:*:community:*:*:* | ||
<= 1.14.2.1CPE matchmatch criteria | cpe:2.3:a:magento:magento:*:*:*:*:enterprise:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.