EUVD-2022-2152

Malicious code in bioql PyPI...

BIT-MAGENTO-2020-24403 Incorrect permissions could lead to unauthorized modification of inventory source data via REST API

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect user permissions vulnerability within the Inventory component. This vulnerability could be abused by authenticated users with Inventory and Source permissions to make unauthorized changes to inventory source data via the...

GHSA-39RW-4M66-82GF Magento incorrect user permissions vulnerability within the Inventory component

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect user permissions vulnerability within the Inventory component. This vulnerability could be abused by authenticated users with Inventory and Source permissions to make unauthorized changes to inventory source data via the...

Magento incorrect user permissions vulnerability within the Inventory component

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect user permissions vulnerability within the Inventory component. This vulnerability could be abused by authenticated users with Inventory and Source permissions to make unauthorized changes to inventory source data via the...

The vulnerability of the Inventory component of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Inventory component of the Magento Commerce software platform for developing and managing online stores is related to authentication errors, which allow attackers to compromise the confidentiality and integrity of protected information using the HTTP network protocol...

The vulnerability of the Inventory component of the Magento Commerce software platform for developing and managing online stores, related to authentication errors, allows attackers to compromise the integrity of the protected information.

The vulnerability of the Inventory component in the Magento Commerce software platform for developing and managing online stores is related to authentication errors. Exploiting this vulnerability can allow an attacker to compromise the integrity of the protected information...

CVE-2020-24403

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect user permissions vulnerability within the Inventory component. This vulnerability could be abused by authenticated users with Inventory and Source permissions to make unauthorized changes to inventory source data via the...

CVE-2020-24403

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect user permissions vulnerability within the Inventory component. This vulnerability could be abused by authenticated users with Inventory and Source permissions to make unauthorized changes to inventory source data via the...

Spoofing

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect user permissions vulnerability within the Inventory component. This vulnerability could be abused by authenticated users with Inventory and Source permissions to make unauthorized changes to inventory source data via the...

CVE-2020-24403

CVE-2020-24403 affects Magento Magento Open Source 2.4.0 and 2.3.5p1 (and earlier) with an incorrect user permissions vulnerability in the Inventory component. The issue allows authenticated users with Inventory and Source permissions to perform unauthorized changes to inventory source data via t...

CVE-2020-24403 Incorrect permissions could lead to unauthorized modification of inventory source data via REST API

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect user permissions vulnerability within the Inventory component. This vulnerability could be abused by authenticated users with Inventory and Source permissions to make unauthorized changes to inventory source data via the...