Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 15/04/2016 Updated: 09/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

The getOrderByStatusUrlKey function in the Mage_Rss_Helper_Order class in app/code/core/Mage/Rss/Helper/Order.php in Magento Enterprise Edition prior to 1.14.2.3 and Magento Community Edition prior to 1.9.2.3 allows remote malicious users to obtain sensitive order information via the order_id in a JSON object in the data parameter in an RSS feed request to index.php/rss/order/status.

Vulnerable Product	Search on Vulmon	Subscribe to Product
magento magento

Magento versions 1922 and below suffer from an information disclosure vulnerability in their RSS feed ...

CWE-200 https://magento.com/security/patches/supee-7405 http://packetstormsecurity.com/files/135941/Magento-1.9.2.2-RSS-Feed-Information-Disclosure.html http://seclists.org/fulldisclosure/2016/Feb/105 http://karmainsecurity.com/KIS-2016-02 http://www.securityfocus.com/archive/1/537601/100/0/threaded https://nvd.nist.gov https://packetstormsecurity.com/files/135941/Magento-1.9.2.2-RSS-Feed-Information-Disclosure.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2016-2212

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect