Lucene search
+L

EUVD-2021-8422

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 24 Views

Magento versions up to 2.4.1 have IDOR vulnerability in customer API allowing sensitive data exposure.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2021-21013
12 Jan 202123:00
–attackerkb
bdu_fstec
BDU FSTEC
Adobe Bridge Buffer Overflow Code Execution
8 Feb 202100:00
–bdu_fstec
bdu_fstec
BDU FSTEC
Magento Commerce API Unauthorized Access
2 Mar 202100:00
–bdu_fstec
cnnvd
CNNVD
Adobe Bridge buffer error vulnerability
12 Jan 202100:00
–cnnvd
cnvd
CNVD
Adobe Bridge out-of-bounds write vulnerability (CNVD-2021-02367)
13 Jan 202100:00
–cnvd
cve
CVE
CVE-2021-21013
13 Jan 202122:35
–cve
cvelist
Cvelist
CVE-2021-21013 Magento Commerce Insecure Direct Object Reference Could Lead To Information Disclosure
13 Jan 202122:35
–cvelist
ncsc
NCSC
Vulnerabilities fixed in Adobe products
13 Jan 202100:00
–ncsc
nvd
NVD
CVE-2021-21013
13 Jan 202123:15
–nvd
osv_cve
osv_cve
CVE-2021-21013
13 Jan 202123:15
–osv_cve
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "c8d044e1-067b-38b2-bdd9-b9bfd8b9510c",
        "vendor": {
          "name": "Adobe"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8173e295-38e0-3d7a-88cc-f18a5a8d239a",
        "product": {
          "name": "Magento Commerce"
        },
        "product_version": "unspecified ≤2.3.6"
      },
      {
        "id": "86e242c7-e6c0-3b5b-966c-3b9c3f39630c",
        "product": {
          "name": "Magento Commerce"
        },
        "product_version": "unspecified ≤2.4.1"
      },
      {
        "id": "d8b155c7-9a65-33bc-b373-30010763c021",
        "product": {
          "name": "Magento Commerce"
        },
        "product_version": "unspecified ≤2.4.0-p1"
      },
      {
        "id": "e76cb1aa-e70f-3fad-848f-4a031a0a93ff",
        "product": {
          "name": "Magento Commerce"
        },
        "product_version": "unspecified ≤None"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
6.8Medium risk
Vulners AI Score6.8
CVSS 3.18.1
CVSS 25.5
EPSS0.0322
24