adobe magento open source 2.4.2 vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to ach...

Adobe Magento Open Source Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source 2.4.2

7.2

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper input validation vulnerability while saving a customer's details with a specially crafted file. An authenticated attacker w...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

6.1

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by a stored cross-site scripting vulnerability in the customer address upload feature that could be abused by an malicious user to inject malic...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

6.1

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by a stored cross-site scripting vulnerability that could be abused by an malicious user to inject malicious scripts into vulnerable form field...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

7.2

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an XML Injection vulnerability when saving a configurable product. An attacker with admin privileges can trigger a specially crafted script ...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

7.5

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

7.2

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by a Path Traversal vulnerability via the `theme[preview_image]` parameter. An attacker with admin privileges could leverage this vulnerability...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

8.8

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper input validation vulnerability. An authenticated attacker can trigger an insecure direct object reference in the `V1/customers/m...

Adobe Magento Open Source Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source 2.4.2

7.2

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to achieve remote code exe...

Adobe Magento Open Source Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source 2.4.2

7.2

CVSSv3

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper input validation vulnerability. An attacker with admin privileges could make a crafted request to the Adobe Stock API to achieve...

Adobe Adobe Commerce Adobe Adobe Commerce 2.4.2 Adobe Magento Open Source Adobe Magento Open Source 2.4.2

Get Started

« PREV 1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook