7.5
CVSSv3

CVE-2021-36030

Published: 01/09/2021 Updated: 08/09/2021
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

Magento Commerce versions 2.4.2 (and previous versions), 2.4.2-p1 (and previous versions) and 2.3.7 (and previous versions) are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter the price of items.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

adobe adobe commerce

adobe adobe commerce 2.4.2

adobe magento open source

adobe magento open source 2.4.2