CVE-2021-36012

CVE-2021-36012 describes a business-logic flaw in Magento Commerce’s placeOrder GraphQL mutation where an authenticated attacker can alter the price of an item, affecting Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier), and 2.3.7 (and earlier). The vulnerability stems from a...

CVE-2020-36012

creationtimestamp| type| source ---|---|--- 2021-01-27 16:37:19+00:00| seen| https://t.me/cibsecurity/22702 2026-07-06 02:18:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpwzlni73o2g...

CVE-2020-36012

The CVE-2020-36012 entry concerns BDTASK Multi-Store Inventory Management System 1.0, where a stored XSS vulnerability exists in the Customer Name Field. According to connected records, a local administrator can inject arbitrary code through this field, indicating improper input handling and pers...