Lucene search
PRIOn knowledge basePRION:CVE-2021-36023HistorySep 06, 2023 - 2:15 p.m.
Input validation
2023-09-0614:15:00
PRIOn knowledge base
www.prio-n.com
3
magento commerce
xml injection
vulnerability
widgets update layout
remote code execution
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.
Related
osv
osv
CVE-2021-36023
2023-09-06 14:15:08
BIT-magento-2021-36023
2024-03-06 10:57:34
cvelist
cvelist
nvd
nvd
CVE-2021-36023
2023-09-06 14:15:08
cve
cve
CVE-2021-36023
2023-09-06 14:15:08
thn
thn
Magento Update Released to Fix Critical Flaws Affecting E-Commerce Sites
2021-08-11 06:28:00
adobe
adobe
APSB21-64 Security updates available for Magento
2021-08-10 00:00:00