Magento 2 Community Edition vulnerable to Improper Authorization
Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-24404US | low2.7 | — | ||
Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by user… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://devdocs.magento.com/guides/v2.3/release-notes/open-source-2-3-6.htmlWEB
- https://experienceleague.adobe.com/docs/commerce-operations/release/notes/magento-open-source/2-4-1.htmlWEB
- https://github.com/magento/magento2PACKAGE
- https://helpx.adobe.com/security/products/magento/apsb20-59.htmlWEB
- https://nvd.nist.gov/vuln/detail/CVE-2020-24404ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan