CVE-2016-2212: Infoleak
The getOrderByStatusUrlKey function in the MageRssHelperOrder class in app/code/core/Mage/Rss/Helper/Order.php in Magento Enterprise Edition before 1.14.2.3 and Magento Community Edition before 1.9.2.3 allows remote attackers to obtain sensitive order information via the orderid in a JSON object in the data parameter in an RSS feed request to index.php/rss/order/status.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-2212?
CVE-2016-2212 is classified as a medium severity vulnerability due to its potential to expose sensitive order information.
How do I fix CVE-2016-2212?
To fix CVE-2016-2212, upgrade your Magento installation to version 1.9.2.3 for Community Edition or 1.14.2.3 for Enterprise Edition or later.
What is the impact of CVE-2016-2212?
The impact of CVE-2016-2212 allows remote attackers to access sensitive order details using the order_id parameter in a JSON object.
Which versions of Magento are affected by CVE-2016-2212?
CVE-2016-2212 affects Magento Community Edition versions prior to 1.9.2.3 and Enterprise Edition versions prior to 1.14.2.3.
Who is vulnerable to CVE-2016-2212?
Any Magento users running affected versions of the platform before the specified versions are vulnerable to CVE-2016-2212.