Signature Verification Bypass

magento/community-edition is vulnerable to signature verification bypass. It is possible because of observable timing discrepancy...

Arbitrary Code Execution

magento/community-edition is vulnerable to arbitrary code execution. The vulnerability exists as through a command injection vulnerability...

Access Control Bypass

magento/community-edition is vulnerable to access control bypass. The vulnerability allows an attacker to bypass security mitigations which could potentially lead to arbitrary code execution...

Authorization Bypass

magento/community-edition is vulnerable to authorization bypass. The vulnerability exists as its defense-in-depth security mitigation does not restrict unauthorized access to the admin panel...

Privilege Escalation

magento/community-edition is vulnerable to privilege escalation. A business logic flaw allows an attacker to gain higher privileges...

Arbitrary Code Execution

magento/community-edition is vulnerable to arbitrary code execution. The vulnerability exists due to a security mitigation bypass weakness...

Arbitrary Code Execution

magento/community-edition is vulnerable to arbitrary code execution. The vulnerability exists through a security mitigation bypass weakness...

Cross-Site Scripting (XSS)

magento/community-edition is vulnerable to cross-site scripting XSS. Lack of sanitization of user-provided parameters allow an injection of malicious script which will be executed when the vulnerable page is loaded...

Arbitrary Code Execution

magento/community-edition is vulnerable to arbitrary code execution. A successful exploitation allows an attacker to inject and execute arbitrary commands on the system...

Arbitrary Code Execution

magento/community-edition is vulnerable to arbitrary code execution. The vulnerability exists due to a security mitigation bypass weakness...

Arbitrary Code Execution

magento/community-edition is vulnerable to arbitrary code execution. A successful exploitation allows an attacker to inject and execute arbitrary commands on the system...

Authorization Bypass

magento/community-edition is vulnerable to authorization bypass. The application allows an attacker to create unauthorized product discounts upon successful exploitation of the vulnerability...

Cross-site Scripting (XSS)

magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists as an admin could be affected by a rendered stored content, leading to information disclosure...

PT-2020-13530 · Magento · Form Builder +1

Name of the Vulnerable Software and Affected Versions: Form Builder version 2.1.0 for Magento Description: The issue concerns multiple XSS problems that can be exploited against Magento 2 admin accounts. This can be achieved via the Current url or email field, or the User-Agent HTTP header...

PT-2020-13175 · Magento · Webforms Pro M2

Name of the Vulnerable Software and Affected Versions: WebForms Pro M2 extension for Magento 2 versions prior to 2.9.17 Description: A cross-site scripting XSS issue exists in the WebForms Pro M2 extension for Magento 2. The issue is related to the textarea field. Recommendations: For versions...

Magento 1 Multiple Vulnerabilities (APSB20-41)

Magento 1 is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Adobe Magento Security Mitigation Bypass Vulnerability (CNVD-2021-20289)

Adobe Magento is the United States of America Odobie Adobe company's set of open source PHP e-commerce system . The system provides rights management , search engines and payment gateways and other functions . A security mitigation bypass vulnerability exists in Adobe Magento, which can be...

Adobe Magento Logic Flaw Vulnerability

Adobe Magento is the United States of America Odobie Adobe company's set of open source PHP e-commerce system . The system provides rights management , search engines and payment gateways and other functions . There is a logic flaw vulnerability in Adobe Magento that can be exploited by attackers...

Adobe Magento Security Mitigation Bypass Vulnerability

Adobe Magento is the United States of America Odobie Adobe company's set of open source PHP e-commerce system . The system provides rights management , search engines and payment gateways and other functions . A security mitigation bypass vulnerability exists in Adobe Magento, which can be...

CVE-2020-9591

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to unauthorized access to admin panel...