CVE-2021-21029 Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution

🗓️ 11 Feb 2021 19:29:32Reported by adobeType

Magento Commerce Reflected Cross-site Scripting via 'file' paramete

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability of the Magento Commerce software platform for developing and managing online stores stems from the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.	25 Mar 202100:00	–	bdu_fstec
Circl	CVE-2021-21029	11 Feb 202122:47	–	circl
CNNVD	Adobe Magento 跨站脚本漏洞	9 Feb 202100:00	–	cnnvd
CNVD	Adobe Magento Cross-Site Scripting Vulnerability (CNVD-2021-13918)	10 Feb 202100:00	–	cnvd
Check Point Advisories	Adobe Magento Commerce Reflected Cross Site Scripting (CVE-2021-21029)	22 Feb 202200:00	–	checkpoint_advisories
CVE	CVE-2021-21029	11 Feb 202119:29	–	cve
Github Security Blog	Magento Reflected Cross-site Scripting vulnerability via 'file' parameter	24 May 202217:41	–	github
NVD	CVE-2021-21029	11 Feb 202120:15	–	nvd
OSV	BIT-MAGENTO-2021-21029 Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution	6 Mar 202410:59	–	osv
OSV	GHSA-JWXH-WJ79-CCM6 Magento Reflected Cross-site Scripting vulnerability via 'file' parameter	24 May 202217:41	–	osv

[
  {
    "product": "Magento Commerce",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2.4.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.4.0-p1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.3.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/magento/apsb21-08.html

11 Jun 2021 17:31Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.14.8

EPSS0.43501

CWE-79