GHSA-prw8-gqwp-f7fh
GitHub Security Advisory
Magento 2 Community Edition DoS vulnerability
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
A denial-of-service vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Under certain conditions, an unauthenticated attacker could force the Magento store's full page cache to serve a 404 page to customers.
Affected Packages
Packagist
magento/community-edition
Affected versions:
2.1.0
(fixed in 2.1.18)
Packagist
magento/community-edition
Affected versions:
2.2.0
(fixed in 2.2.9)
Packagist
magento/community-edition
Affected versions:
2.3.0
(fixed in 2.3.2)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: June 14, 2025 6:24 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.