adobe systems incorporated magento 2 vulnerabilities and exploits

(subscribe to this query)

A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 before 2.2.10, Magento 2.3 before 2.3.3 or 2.3.2-p1. An authenticated admin user can inject arbitrary JavaScript code when adding an image for during simple product creation.

Adobe Systems Incorporated Magento 2 Magento Magento

A remote code execution vulnerability exists in Magento 2.1 before 2.1.19, Magento 2.2 before 2.2.10, Magento 2.3 before 2.3.3. An authenticated admin user with import product privileges can delete files through bulk product import and inject code into XSLT file. The combination ...

Adobe Systems Incorporated Magento 2 Magento Magento

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.1 before 2.1.19, Magento 2.2 before 2.2.10, Magento 2.3 before 2.3.3. An authenticated user can inject arbitrary Javascript code by manipulating section of a POST request related to customer's email addres...

Adobe Systems Incorporated Magento 2 Magento Magento

An insecure component vulnerability exists in Magento 2.1 before 2.1.19, Magento 2.2 before 2.2.10, Magento 2.3 before 2.3.3. Magento 2 codebase leveraged outdated versions of JS libraries (Bootstrap, jquery, Knockout) with known security vulnerabilities.

Adobe Systems Incorporated Magento 2 Magento Magento

A remote code execution vulnerability exists in Magento 2.1 before 2.1.19, Magento 2.2 before 2.2.10, Magento 2.3 before 2.3.3. An authenticated user with privileges to create products can craft custom layout update and use import product functionality to enable remote code execu...

Adobe Systems Incorporated Magento 2 Magento Magento

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 before 2.2.10, Magento 2.3 before 2.3.3 or 2.3.2-p1. An authenticates user can inject arbitrary JavaScript code via product view id specification.

Adobe Systems Incorporated Magento 2 Magento Magento

An insufficient logging and monitoring vulnerability exists in Magento 1 before 1.9.4.3 and 1.14.4.3, Magento 2.1 before 2.1.19, Magento 2.2 before 2.2.10, Magento 2.3 before 2.3.3. The logging feature required for effective monitoring did not contain sufficent data to effectivel...

Adobe Systems Incorporated Magento 1& 2 Magento Magento

A reflected cross-site scripting (XSS) vulnerability exists in Magento 2.2 before 2.2.10, Magento 2.3 before 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code via email template preview.

Adobe Systems Incorporated Magento 2 Magento Magento Magento Magento 2.3.2

Insecure authentication and session management vulnerability exists in Magento 2.2 before 2.2.10, Magento 2.3 before 2.3.3 or 2.3.2-p1. An authenticated user can manipulate session validation setting for a storefront that leads to insecure authentication and session management.

Adobe Systems Incorporated Magento 2 Magento Magento Magento Magento 2.3.2

A remote code execution vulnerability exists in Magento 2.2 before 2.2.10, Magento 2.3 before 2.3.3 or 2.3.2-p1. An authenticated user can craft a malicious CSRF payload that can result in arbitrary command execution.

Adobe Systems Incorporated Magento 2 Magento Magento Magento Magento 2.3.2

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook