An unauthenticated user could execute arbitrary code through an SQL injection vulnerability, which caused sensitive data leakage.
Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update
This vulnerability affects the following application versions:
- Magento 2.2.0
- Magento 2.2.0-rc2.0
- Magento 2.2.0-rc2.1
- Magento 2.2.0-rc2.2
- Magento 2.2.0-rc2.3
- Magento 2.2.0-rc3.0
- Magento 2.2.1
- Magento 2.2.2
- Magento 2.2.3
- Magento 2.2.4
- Magento 2.2.5
- Magento 2.2.6
- Magento 2.2.7
- Magento 2.3.0