GHSA-vrq2-w7r7-3fp2

ghsaUSosv

Magento is affected by an improper authorization vulnerability

view advisory published 2022-05-24Licence: CC-BY-4.0

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper authorization vulnerability. An authenticated attacker could leverage this vulnerability to achieve sensitive information disclosure.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-36037US	medium4.0OT elevated	1.80% (78th)	—	2021-09-01
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization vulnerability. An authenticated att…

references

External citations — patches, advisories, analysis.

https://github.com/magento/magento2PACKAGE
https://helpx.adobe.com/security/products/magento/apsb21-64.htmlWEB
https://nvd.nist.gov/vuln/detail/CVE-2021-36037ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan