Magento versions 2.4.1 (and previous versions), 2.4.0-p1 (and previous versions) and 2.3.6 (and previous versions) are vulnerable to an insecure direct object reference (IDOR) in the product module. Successful exploitation could lead to unauthorized access to restricted resources.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
magento magento |
||
magento magento 2.4.1 |
||
magento magento 2.4.0 |
||
magento magento 2.3.6 |