A cross-site request forgery vulnerability exists in Magento 2.1 before 2.1.18, Magento 2.2 before 2.2.9, Magento 2.3 before 2.3.2. This can result in unintended deletion of user roles.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
magento magento |