Lucene search
GoogleOSV:CVE-2021-36012HistorySep 01, 2021 - 3:15 p.m.
CVE-2021-36012
2021-09-0115:15:09
Google
osv.dev
12
magento commerce
business logic error
placeorder
graphql mutation
authenticated attacker
vulnerability
price alteration
software security
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a business logic error in the placeOrder graphql mutation. An authenticated attacker can leverage this vulnerability to altar the price of an item.
Related
cve
cve
CVE-2021-36012
2021-09-01 15:15:09
cvelist
cvelist
CVE-2021-36012 Magento Commerce Gift Card Business Logic Error
2021-09-01 14:28:16
nvd
nvd
CVE-2021-36012
2021-09-01 15:15:09
prion
prion
Code injection
2021-09-01 15:15:00
adobe
adobe
APSB21-64 Security updates available for Magento
2021-08-10 00:00:00