Lucene search

K
osvGoogleOSV:BIT-MAGENTO-2021-21026
HistoryMar 06, 2024 - 11:00 a.m.

BIT-magento-2021-21026

2024-03-0611:00:10
Google
osv.dev
5
magento
authorization
vulnerability
integrations
admin console
software
unauthorized access

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.9%

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin console is required for successful exploitation.

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

28.9%

Related for OSV:BIT-MAGENTO-2021-21026