Threats tagged 'ghsa-92fr-9r7v-rw2x'

OpenMage Magento LTS versions before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 have a critical cross-site request forgery (CSRF) vulnerability in the admin and storefront OAuth confirm actions. These actions accept GET requests without form-key validation, allowing attackers with OAuth consumer credentials to trick logged-in administrators or customers into authorizing malicious OAuth tokens. This can lead to persistent REST API access tokens bound to the victim.