Lucene search

GoogleOSV:BIT-MAGENTO-2021-28583

HistoryMar 06, 2024 - 10:58 a.m.

BIT-magento-2021-28583

2024-03-0610:58:23

Google

osv.dev

magento

secure design principles

rma pdf

unauthorized access

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%

JSON

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Violation of Secure Design Principles vulnerability in RMA PDF filename formats. Successful exploitation could allow an attacker to get unauthorized access to restricted resources.

CPENameOperatorVersion
magentoge2.4.1
magentoge2.3.6-p1
magentole2.4.1
magentole2.3.6-p1
magentoge2.4.2
magentole2.4.2
magentoge2.4.1-p1
magentole2.3.6
magentole2.4.1-p1
magentoge2.3.6

Name	Operator	Version
magento	ge	2.4.1
magento	ge	2.3.6-p1
magento	le	2.4.1
magento	le	2.3.6-p1
magento	ge	2.4.2
magento	le	2.4.2
magento	ge	2.4.1-p1
magento	le	2.3.6
magento	le	2.4.1-p1
magento	ge	2.3.6

Rows per page:

1-10 of 111

References

helpx.adobe.com/security/products/magento/apsb21-30.html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.8%

JSON

Related for OSV:BIT-MAGENTO-2021-28583