BIT-magento-2021-28583

vendorUSosv

Magento Commerce insecure storage of sensitive documentation

view advisory published 2024-03-06Licence: per source

Magento versions 2.4.2 (and earlier), 2.4.1 (and earlier) and 2.3.6 (and earlier) are affected by a Violation of Secure Design Principles vulnerability in RMA PDF filename formats. Successful exploitation could allow an attacker to get unauthorized access to restricted resources.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-28583US	medium4.2	1.90% (80th)	—	2021-06-28
Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Violation of Secure Design Principles vulnerability in RMA PDF filename fo…

references

External citations — patches, advisories, analysis.

https://helpx.adobe.com/security/products/magento/apsb21-30.htmlADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2021-28583WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan