CVE-2021-36020

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an XML Injection vulnerability in the 'City' field. An unauthenticated attacker can trigger a specially crafted script to achieve remote code execution...

CVE-2021-36043

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by a blind SSRF vulnerability in the bundled dotmailer extension. An attacker with admin privileges could abuse this to achieve remote code execution should Redis be enabled...

CVE-2021-36032

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability. An authenticated attacker can trigger an insecure direct object reference in the V1/customers/me endpoint to achieve information exposure and privile...

CVE-2021-36039

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability via the quoteId parameter. An attacker can abuse this vulnerability to disclose sensitive information...

CVE-2021-36022

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution...

CVE-2021-36038

Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability in the Multishipping Module. An authenticated attacker could leverage this vulnerability to achieve sensitive information disclosure...

Magento Commerce 输入验证错误漏洞

Magento is an open source e-commerce platform written in PHP by Adobe. An input validation error vulnerability exists in Adobe Magento. An attacker can exploit this vulnerability to execute arbitrary code...

Adobe Releases Security Updates for Multiple Products 

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessa...

Magento Commerce安全漏洞

Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. A security vulnerability exists in Magento Commerce, which exists due to incorrect input validation when processing XML data. A remote administrator can pass specially crafted XML data to th...

Magento Commerce 安全漏洞

Magento Commerce is to provide a best-in-class shopping experience without developer support. Magento Commerce has a security vulnerability that exists due to insufficient authorization checks. A remote administrator can bypass implemented security restrictions and gain unauthorized access to the...

Magento Commerce输入验证错误漏洞

Magento is an open source e-commerce platform written in PHP by Adobe. An input validation error vulnerability exists in Adobe Magento. An attacker could exploit this vulnerability to bypass security features...

Magento Commerce 和 Magento Open Source输入验证错误漏洞

Magento is an open source e-commerce platform written in PHP by Adobe.Adobe Magento is vulnerable to an input validation error. An attacker could exploit the vulnerability to cause a denial of service...

Magento Commerce 和 Magento Open Source输入验证错误漏洞

Magento Open Source is to provide basic e-commerce functionality that allows you to build unique online stores from scratch.Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. An input validation error vulnerability exists in Magento Commerce...

Magento Commerce 授权问题漏洞

Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. Magento Commerce has an authorization issue vulnerability that exists due to insufficient authorization checks. A remote administrator can bypass implemented security restrictions and gain...

Magento Open Source和Magento Commerce 注入漏洞

Magento Open Source is to provide basic e-commerce functionality that allows you to build unique online stores from scratch.Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. An injection vulnerability exists in Magento Commerce and Magento...

Magento Commerce 和 Magento Open Source 输入验证错误漏洞

Magento Open Source is to provide basic e-commerce functionality that allows you to build unique online stores from scratch.Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. An input validation error vulnerability exists in Magento Commerce...

Magento Commerce 和 Magento Open Source安全漏洞

Magento Open Source is to provide basic e-commerce functionality that allows you to build unique online stores from scratch.Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. A security vulnerability exists in Magento Commerce and Magento Op...

Magento Commerce 安全漏洞

Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. A security vulnerability exists in Magento Commerce, which exists due to incorrect input validation when processing XML data. A remote administrator can pass specially crafted XML data to th...

Magento Commerce 代码问题漏洞

Magento is an open source e-commerce platform written in PHP by Adobe. Adobe Magento is vulnerable to improper input validation. An attacker can exploit this vulnerability to execute arbitrary code...

Magento Commerce 路径遍历漏洞

Magento Commerce is to provide a best-in-class shopping experience without the need for developer support. A path traversal vulnerability exists in Magento Commerce due to an input validation error when processing a catalog traversal sequence. A remote administrator can send a specially crafted...