GHSA-m8wx-whpp-q283

ghsaUSosv

Magento improper authorization vulnerability

view advisory published 2022-05-24Licence: CC-BY-4.0

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper authorization vulnerability. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-36029US	high7.2	2.48% (84th)	—	2021-09-01
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization vulnerability. An attacker with adm…

references

External citations — patches, advisories, analysis.

https://github.com/magento/magento2PACKAGE
https://helpx.adobe.com/security/products/magento/apsb21-64.htmlWEB
https://nvd.nist.gov/vuln/detail/CVE-2021-36029ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan