CVE-2018-5301: Magento

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433.

Affected products

• Magento Magento: before 2.0.10 (fixed in 2.0.10); from 2.1.0, before 2.1.2 (fixed in 2.1.2)

Published 2018-01-08. Last modified 2026-06-17.