GoogleOSV:CVE-2021-21014CVE-2021-21014
7.3 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
45.6%
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| devdocs | eq | 0.42.0-beta1 | |
| devdocs | eq | 2.1.18 | |
| devdocs | eq | 2.2.0-RC1.1 | |
| devdocs | eq | 2.3.3 | |
| devdocs | eq | 0.1.0-alpha107 | |
| devdocs | eq | 0.42.0-beta2 | |
| devdocs | eq | 2.3.4 | |
| devdocs | eq | 2.2.2 | |
| devdocs | eq | 2.2.0-RC1.2 | |
| devdocs | eq | 2.1.8 |
Related
7.3 High
AI Score
Confidence
Low
6.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
45.6%