CVE-2021-36021 Magento Commerce CMS Page Improper Input Validation Could Lead To Remote Code Execution

🗓️ 06 Sep 2023 13:08:10Reported by adobeType

Magento Commerce CMS Page Input Validation Vulnerability

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the software platform for developing and managing online stores Magento Commerce arises from insufficient validation of input data. This allows attackers to execute arbitrary code.	12 Apr 202200:00	–	bdu_fstec
CNNVD	Magento Commerce 和 Magento Open Source 输入验证错误漏洞	10 Aug 202100:00	–	cnnvd
CVE	CVE-2021-36021	6 Sep 202313:08	–	cve
EUVD	EUVD-2021-22654	7 Oct 202500:30	–	euvd
Github Security Blog	Magento affected by remote code execution vulnerability in the CMS page scheduled update feature	6 Sep 202315:30	–	github
NCSC	Vulnerabilities fixed in Adobe Connect and Magento	11 Aug 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in Adobe products	18 Aug 202100:00	–	ncsc
NVD	CVE-2021-36021	6 Sep 202314:15	–	nvd
OSV	BIT-MAGENTO-2021-36021 Magento Commerce CMS Page Improper Input Validation Could Lead To Remote Code Execution	6 Mar 202410:57	–	osv
OSV	GHSA-4G27-Q2W9-M8M8 Magento affected by remote code execution vulnerability in the CMS page scheduled update feature	6 Sep 202315:30	–	osv

[
  {
    "defaultStatus": "affected",
    "product": "Adobe Commerce",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2.3.7",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/magento/apsb21-64.html

14 Sep 2023 12:11Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.2

EPSS0.01949

CWE-20