CVE-2019-7947 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the GiftCardAccount removal feature in various versions of Magento Open Source and Magento Commerce. This medium-severity vulnerability (CVSS 6.5) requires user interaction and a low attack complexity, allowing an attacker to delete gift card accounts without authorization, though it does not impact confidentiality or availability. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.9.4.2CPE matchmatch criteria | cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:* | ||
< 1.14.4.2CPE matchmatch criteria | cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:* | ||
>= 2.1.0, < 2.1.18CPE matchmatch criteria | cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:* | ||
>= 2.2.0, < 2.2.9CPE matchmatch criteria | cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:* | ||
>= 2.3.0, < 2.3.2CPE matchmatch criteria | cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.