adobe magento open source 2.3.7 vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv3

Adobe Commerce versions 2.4.3-p1 (and previous versions) and 2.3.7-p2 (and previous versions) are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code executio...

Adobe Magento Open Source 2.3.7 Adobe Magento Open Source 2.4.3 Adobe Magento Open Source Adobe Commerce 2.3.7 Adobe Commerce 2.4.3 Adobe Commerce

6.5

CVSSv3

Adobe Commerce versions 2.4.2-p2 (and previous versions), 2.4.3 (and previous versions) and 2.3.7p1 (and previous versions) are affected by a cross-site request forgery (CSRF) vulnerability via a Wishlist Share Link. Successful exploitation could lead to unauthorized addition to ...

Adobe Commerce 2.3.7 Adobe Commerce Adobe Commerce 2.4.2 Adobe Commerce 2.4.3 Adobe Magento Open Source 2.3.7 Adobe Magento Open Source Adobe Magento Open Source 2.4.2 Adobe Magento Open Source 2.4.3

6.5

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper improper authorization vulnerability. An authenticated attacker could leverage this vulnerability to achieve sensitive informati...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

7.2

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper improper authorization vulnerability. An attacker with admin privileges could leverage this vulnerability to achieve remote code...

Adobe Magento Open Source Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source 2.4.2

6.5

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper input validation vulnerability via the `quoteId` parameter. An attacker can abuse this vulnerability to disclose sensitive infor...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

7.2

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to achieve remote code exe...

Adobe Magento Open Source Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source 2.4.2

6.5

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper input validation vulnerability in the Multishipping Module. An authenticated attacker could leverage this vulnerability to achie...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

7.5

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

9.8

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an XML Injection vulnerability in the 'City' field. An unauthenticated attacker can trigger a specially crafted script to achieve ...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

7.2

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve re...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook