description: Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. This could be exploited by an attacker with access to network traffic to perform unauthorized actions.
problem types: Information leakage
affected:
{
product: Magento 1
vendor: Adobe Systems Incorporated
versions:
status: affected, version: Magento Open Source prior to 1.9.4.3
status: affected, version: Magento Commerce prior to 1.14.4.3
}