Lucene search
+L

CVE-2021-21013

🗓️ 13 Jan 2021 22:35:54Reported by adobeType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 99 Views

Magento versions 2.4.1 and earlier are vulnerable to IDOR in customer API module

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2021-21013
12 Jan 202123:00
–attackerkb
bdu_fstec
BDU FSTEC
Adobe Bridge Buffer Overflow Code Execution
8 Feb 202100:00
–bdu_fstec
bdu_fstec
BDU FSTEC
Magento Commerce API Unauthorized Access
2 Mar 202100:00
–bdu_fstec
cnnvd
CNNVD
Adobe Bridge buffer error vulnerability
12 Jan 202100:00
–cnnvd
cnvd
CNVD
Adobe Bridge out-of-bounds write vulnerability (CNVD-2021-02367)
13 Jan 202100:00
–cnvd
cvelist
Cvelist
CVE-2021-21013 Magento Commerce Insecure Direct Object Reference Could Lead To Information Disclosure
13 Jan 202122:35
–cvelist
euvd
EUVD
EUVD-2021-8422
3 Oct 202520:07
–euvd
ncsc
NCSC
Vulnerabilities fixed in Adobe products
13 Jan 202100:00
–ncsc
nvd
NVD
CVE-2021-21013
13 Jan 202123:15
–nvd
osv_cve
osv_cve
CVE-2021-21013
13 Jan 202123:15
–osv_cve
Rows per page
NVD
Vulners
Node
OR
adobemagentoRange≤2.4.1commerce
adobemagentoRange2.4.1≥open_source
[
  {
    "product": "Magento Commerce",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2.4.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.4.0-p1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.3.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:34Current
7.5High risk
Vulners AI Score7.5
CVSS 25.5
CVSS 3.18.1
EPSS0.0322
99