Lucene search

K
osvGoogleOSV:GHSA-8WM7-H2QH-FF4C
HistoryMay 24, 2022 - 5:21 p.m.

Magento authorization bypass vulnerability

2022-05-2417:21:49
Google
osv.dev
4

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.9%

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.9%