Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Magento Community Edition Improper Input Validation vulnerability

🗓️ 09 Sep 2025 15:31:19Reported by GitHub Advisory DatabaseType 
github
 github🔗 github.com👁 11 Views

Magento Community Edition has improper input validation enabling session takeover with high impact.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for Improper Input Validation in Adobe Commerce
19 Mar 202614:44
–githubexploit
GithubExploit		Exploit for Improper Input Validation in Adobe Commerce
24 May 202616:08
–githubexploit
GithubExploit		Exploit for Improper Input Validation in Adobe Commerce
6 Nov 202509:38
–githubexploit
GithubExploit		Exploit for Improper Input Validation in Adobe Commerce
30 Dec 202506:38
–githubexploit
Tenable Nessus		Adobe Commerce/Magento Open Source Improper Input Validation (APSB25-88)
23 Sep 202500:00
–nessus
Tenable Nessus		Adobe Commerce B2B Improper Input Validation (APSB25-88)
23 Sep 202500:00
–nessus
Tenable Nessus		Adobe Commerce / Magento Insecure Deserialization (SessionReaper)
24 Oct 202500:00
–nessus
Akamai Blog		The Grim SessionReaper (CVE-2025-54236) Comes to Collect for Halloween
27 Oct 202505:00
–akamaiblog
Adobe		APSB25-88 : Security update available for Adobe Commerce
9 Sep 202500:00
–adobe
BDU FSTEC		The vulnerability of the Siemens User Management Component (UMC) in the web-based control system for technological processes of SIMATIC PCS neo allows a hacker to execute arbitrary code.
10 Sep 202500:00
–bdu_fstec
Rows per page
Vulners
Node
OR
magentoproject-community-editionRange≤2.0.2composer
magentocommunity-editioncomposer
magentocommunity-editionRange2.4.8-beta1–2.4.8-p2composer
magentocommunity-editionRange2.4.7-beta1–2.4.7-p7composer
magentocommunity-editioncomposer
magentocommunity-editioncomposer
magentocommunity-editionRange2.4.9-alpha1–2.4.9-alpha2composer
magentocommunity-editioncomposer
magentocommunity-editionRange2.4.6-p1–2.4.6-p12composer
magentocommunity-editioncomposer
magentocommunity-editionRange≤2.4.5-p14composer

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
27 Oct 2025 15:13Current
6.7Medium risk
Vulners AI Score6.7
CVSS 3.19.1
EPSS0.96742
SSVC
CWE-20
Magento Community Editionimproper input validationsession takeoverhigh impactno user interaction
11