adobe magento open source 2.4.2 vulnerabilities and exploits

(subscribe to this query)

6.5

CVSSv3

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the Multishipping Module. An authenticated attacker could leverage this vulnerability to achieve sensitive information...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

6.1

CVSSv3

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a stored cross-site scripting vulnerability in the customer address upload feature that could be abused by an attacker to inject malicious scripts into vulnerable form...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

7.2

CVSSv3

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to achieve remote code execution....

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

7.2

CVSSv3

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability when saving a configurable product. An attacker with admin privileges can trigger a specially crafted script to achieve remote code...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

6.5

CVSSv3

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a business logic error in the placeOrder graphql mutation. An authenticated attacker can leverage this vulnerability to altar the price of an item....

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

6.6

CVSSv3

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a blind SSRF vulnerability in the bundled dotmailer extension. An attacker with admin privileges could abuse this to achieve remote code execution should Redis be...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

7.2

CVSSv3

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to bypass file extension restrictions and could lead to...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

7.5

CVSSv3

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter the price of items....

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

6.1

CVSSv3

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a stored cross-site scripting vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

6.5

CVSSv3

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization vulnerability. An authenticated attacker could leverage this vulnerability to achieve sensitive information disclosure....

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook