GHSA-7gh6-f4jh-3crq

ghsaUSosv

Magento Violation of Secure Design Principles vulnerability in RMA PDF filename formats

view advisory published 2022-05-24Licence: CC-BY-4.0

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Violation of Secure Design Principles vulnerability in RMA PDF filename formats. Successful exploitation could allow an attacker to get unauthorized access to restricted resources.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-28583US	medium4.2	1.90% (79th)	—	2021-06-28
Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Violation of Secure Design Principles vulnerability in RMA PDF filename fo…

references

External citations — patches, advisories, analysis.

https://github.com/magento/magento2PACKAGE
https://github.com/magento/magento2/commit/1bd5cb8c065e44779526c0b044ce19b884707695WEB
https://helpx.adobe.com/security/products/magento/apsb21-30.htmlWEB
https://nvd.nist.gov/vuln/detail/CVE-2021-28583ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan