cveboard RSS feed

CVE-2019-7139

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2019
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database, which causes sensitive data leakage. This issue is fixed in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Magento Open Source

Vendor
Magento
Product
Magento Open Source
Platforms
Unknown
Default status
Unknown
Magento Open Source · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
prior to 1.9.4.1affectedUnavailableUnavailableUnavailableNone listed

Magento Commerce

Vendor
Magento
Product
Magento Commerce
Platforms
Unknown
Default status
Unknown
Magento Commerce · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
prior to 1.14.4.1affectedUnavailableUnavailableUnavailableNone listed

Magento

Vendor
Magento
Product
Magento
Platforms
Unknown
Default status
Unknown
Magento · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
prior to 2.1.17affectedUnavailableUnavailableUnavailableNone listed
prior to 2.2.8affectedUnavailableUnavailableUnavailableNone listed
prior to 2.3.1affectedUnavailableUnavailableUnavailableNone listed