Magento Improper input validation vulnerability

2022-05-2419:06:24

Google

osv.dev

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.5%

JSON

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper input validation vulnerability in the New customer WebAPI.Successful exploitation could allow an attacker to send unsolicited spam e-mails.

CPENameOperatorVersion
magento/community-editioneq0.1.0-alpha97
magento/community-editioneq0.42.0-beta6
magento/community-editioneq2.0.18
magento/community-editioneq0.42.0-beta7
magento/community-editioneq2.4.0-p1
magento/community-editioneq0.1.0-alpha89
magento/community-editioneq2.1.18
magento/community-editioneq1.0.0-beta2
magento/community-editioneq2.2.7
magento/community-editioneq0.42.0-beta8

Name	Operator	Version
magento/community-edition	eq	0.1.0-alpha97
magento/community-edition	eq	0.42.0-beta6
magento/community-edition	eq	2.0.18
magento/community-edition	eq	0.42.0-beta7
magento/community-edition	eq	2.4.0-p1
magento/community-edition	eq	0.1.0-alpha89
magento/community-edition	eq	2.1.18
magento/community-edition	eq	1.0.0-beta2
magento/community-edition	eq	2.2.7
magento/community-edition	eq	0.42.0-beta8