4415 matches found
Authorization Bypass
magento/community-edition is vulnerable to authorization bypass. The vulnerability exists as a user can bypass access controls via REST API calls to assign themselves to an arbitrary company, thereby gaining read access to potentially confidental information...
SQL Injection
magento/community-edition is vulnerable to SQL injection. The vulnerability exists as a user with marketing manipulation privileges can invoke methods that alter data of the underlying model followed by corresponding database modifications...
Authorization Bypass
magento/community-edition is vulnerablbe to authorization bypass. The vulnerability exists through an Insecure Direct Object Reference IDOR that could allow unauthorized access to order details...
Cross-site Scripting (XSS)
magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists as a user with privileges to customer configurations to inject malicious javascript...
Information Disclosure
magento/community-edition is vulnerable to information disclosure. The vulnerability exists as the samples of disabled downloadable products are accessible due to the lack of user input sanitization...
Remote Code Execution (RCE)
magento/community-edition is vulnerable to remote code execution RCE. The vulnerability exists as a user with admin privileges to email templates can execute arbitrary code by previewing a malicious template...
Authorization Bypass
magento/community-edition is vulnerable to authorization bypass. The vulnerability exists as a low-privileged user to make unauthorized environment configuration changes...
Cross-site Scripting (XSS)
magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists as users with privileges to email templates can cause XSS attacks...
Server-side Request Forgery (SSRF)
magento/community-edition is vulnerable to server-side request forgery SSRF. The vulnerability exists as a user with access to the admin panel can manipulate system configuration and execute arbitrary code...
Arbitrary File Upload
magento/community-edition is vulnerable to arbitrary file upload. The vulnerability exists as a file upload filter bypass exists that allows users with admin privileges to edit configuration keys to remove file extension filters, potentially resulting in the malicious upload and execution of...
Remote Code Execution (RCE)
magento/community-edition is vulnerable to remote code execution RCE. The vulnerability exists as users with admin privileges to create sitemaps can execute arbitrary PHP code by creating a malicious sitemap file...
Cross Site Request Forgery (CSRF)
magento/community-edition is vulnerable to cross-site request forgery CSRF. The vulnerability exists through the GiftCardAccount removal feature...
Denial Of Service (DoS)
magento/community-edition is vulnerable to denial of service DoS. The vulnerability exists due to the lack of brute-forcing defenses in the token exchange protocol...
Information Disclosure
magento/community-edition is vulnerable to information disclosure. The vulnerability exists as an admin is able to view metadata of a trusted device that is used by another admin...
Arbitrary Code Execution
magento/community-edition is vulnerable to arbitrary code execution. The vulnerability exists as an admin with import feature privileges can make modifications to a configuration file that allows unauthorized removal of file upload restrictions, causing arbitrary code execution...
Remote Code Execution (RCE)
magento/community-edition is vulnerable to remote code execution RCE. The vulnerability exists as an admin, who is able to create or edit a product, is able to upload RCE payloads through XML layout updates...
Server Side Request Forgery (SSRF)
magento/community-edition is vulnerable to server side request forgery SSRF. The vulnerability exists as an admin can manipulate shipment settings to execute arbitrary code...
Authorization Bypass
magento/community-edition is vulnerable to authorization bypass. The vulnerability exists due to an insecure direct object reference issue where the downloadable products folder can be deleted...