Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper improper authorization vulnerability. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
adobe magento open source |
||
adobe adobe commerce |
||
adobe adobe commerce 2.4.2 |
||
adobe magento open source 2.4.2 |