[PRODSECBUG-2241] Email functionality could be abused for SPAM or spoofing activities – CVE-2019-7879

The default configuration of the Magento “Email to a friend” feature could be abused by an attacker to send SPAM or spoofed emails.

Part of update SUPEE-11155

This vulnerability affects the following application versions:

• Magento 1.9.1.1
• Magento 1.9.2.0
• Magento 1.9.2.1
• Magento 1.9.2.2
• Magento 1.9.2.3
• Magento 1.9.2.4
• Magento 1.9.3.0
• Magento 1.9.3.1
• Magento 1.9.3.2
• Magento 1.9.3.3
• Magento 1.9.3.4
• Magento 1.9.3.6
• Magento 1.9.3.7
• Magento 1.9.3.8
• Magento 1.9.3.9
• Magento 1.9.3.10
• Magento 1.9.4.0
• Magento 1.9.4.1