Lucene search

K
osvGoogleOSV:CVE-2021-36030
HistorySep 01, 2021 - 3:15 p.m.

CVE-2021-36030

2021-09-0115:15:09
Google
osv.dev
6
magento commerce
input validation
vulnerability
checkout process
unauthenticated attacker
price alteration
software

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

46.4%

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter the price of items.

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

46.4%

Related for OSV:CVE-2021-36030