Lucene search

K
osvGoogleOSV:CVE-2021-36039
HistorySep 01, 2021 - 3:15 p.m.

CVE-2021-36039

2021-09-0115:15:10
Google
osv.dev
9
magento commerce
version 2.4.2
version 2.3.7
improper input validation
sensitive information disclosure

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

31.5%

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability via the quoteId parameter. An attacker can abuse this vulnerability to disclose sensitive information.

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

31.5%

Related for OSV:CVE-2021-36039