CVE-2021-21012

🗓️ 13 Jan 2021 22:35:38Reported by adobeType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 104 Views

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier, and 2.3.6 and earlier are vulnerable to insecure direct object vulnerability (IDOR) in checkout module

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.	9 Feb 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the order formatting module of the Magento Commerce software platform, which is used for developing and managing online stores, allows a malicious actor to gain unauthorized access to protected information.	2 Mar 202100:00	–	bdu_fstec
CNNVD	Adobe Bridge 缓冲区错误漏洞	12 Jan 202100:00	–	cnnvd
CNVD	Adobe Bridge out-of-bounds write vulnerability (CNVD-2021-02368)	13 Jan 202100:00	–	cnvd
Cvelist	CVE-2021-21012 Magento Commerce Insecure Direct Object Reference Vulnerability Could Lead To Sensitive Information Disclosure	13 Jan 202122:35	–	cvelist
EUVD	EUVD-2021-8421	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Adobe products	13 Jan 202100:00	–	ncsc
NVD	CVE-2021-21012	13 Jan 202123:15	–	nvd
Prion	Information disclosure	13 Jan 202123:15	–	prion
Positive Technologies	PT-2021-1885 · Adobe · Magento	12 Jan 202100:00	–	ptsecurity

NVD

Vulners

Node

adobe magento_commerceRange≤2.3.6

adobe magento_commerceMatch2.4.0

adobe magento_commerceMatch2.4.0p1

adobe magento_commerceMatch2.4.1

adobe magento_open_sourceRange≤2.3.6

adobe magento_open_sourceMatch2.4.0

adobe magento_open_sourceMatch2.4.0p1

adobe magento_open_sourceMatch2.4.1

[
  {
    "product": "Magento Commerce",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2.4.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.4.0-p1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.3.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/magento/apsb21-08.html

21 Nov 2024 05:47Current

5.1Medium risk

Vulners AI Score5.1

CVSS 24.3

CVSS 35.3

EPSS0.00447

CWE-639