CVE-2019-8112

CVE-2019-8112 is a security bypass vulnerability affecting Magento 2.2 prior to 2.2.10 and Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated attacker can bypass the email confirmation process for new user accounts by intercepting account data from a POST response using a GET request. This vulnerability has a CVSS score of 7.5 (High), indicating a network-based attack with low complexity, requiring no privileges or user interaction, and resulting in high confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this CVE.