Input validation

2021-09-0115:15:00

PRIOn knowledge base

www.prio-n.com

8.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

JSON

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An authenticated attacker can trigger an insecure direct object reference in the V1/customers/me endpoint to achieve information exposure and privilege escalation.

CPENameOperatorVersion
adobe_commercege2.3.0
adobe_commercele2.3.7
adobe_commerceeq2.4.2 p1
adobe_commercege2.4.0
adobe_commercele2.4.2
magento_open_sourcege2.3.0
magento_open_sourcele2.3.7
magento_open_sourceeq2.4.2 p1
magento_open_sourcege2.4.0
magento_open_sourcele2.4.2

Name	Operator	Version
adobe_commerce	ge	2.3.0
adobe_commerce	le	2.3.7
adobe_commerce	eq	2.4.2 p1
adobe_commerce	ge	2.4.0
adobe_commerce	le	2.4.2
magento_open_source	ge	2.3.0
magento_open_source	le	2.3.7
magento_open_source	eq	2.4.2 p1
magento_open_source	ge	2.4.0
magento_open_source	le	2.4.2