The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

🗓️ 25 Mar 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

Magento Commerce platform lacks protections for website structure, enabling arbitrary code execution.

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2021-21030	9 Feb 202123:00	–	attackerkb
CNNVD	Adobe Magento 跨站脚本漏洞	9 Feb 202100:00	–	cnnvd
CNVD	Adobe Magento Cross-Site Scripting Vulnerability (CNVD-2021-13917)	10 Feb 202100:00	–	cnvd
CVE	CVE-2021-21030	11 Feb 202119:29	–	cve
Cvelist	CVE-2021-21030 Magento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution	11 Feb 202119:29	–	cvelist
EUVD	EUVD-2022-2758	3 Oct 202520:07	–	euvd
Github Security Blog	Magento stored cross-site scripting (XSS) in the customer address upload feature	24 May 202217:41	–	github
NVD	CVE-2021-21030	11 Feb 202120:15	–	nvd
OSV	BIT-MAGENTO-2021-21030 Magento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution	6 Mar 202410:59	–	osv
OSV	GHSA-6988-G89M-27VF Magento stored cross-site scripting (XSS) in the customer address upload feature	24 May 202217:41	–	osv

Vulners

Node

OR

adobe_systems magento_commerceRange<2.3.6-p1

adobe_systems magento_commerceRange<2.4.1-p1

adobe_systems magento_commerceRange<2.4.2

adobe_systems magento_open_sourceRange<2.3.6-p1

adobe_systems magento_open_sourceRange<2.4.1-p1

adobe_systems magento_open_sourceRange<2.4.2

Source	Link
helpx	www.helpx.adobe.com/security/products/magento/apsb21-08.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-21030
web	www.web.nvd.nist.gov/view/vuln/detail

25 Mar 2021 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 24.3

CVSS 38.1

EPSS0.05629

Magento Commerce website structure arbitrary code execution