CVE-2021-39864 Adobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart Addition

Adobe Commerce versions 2.4.2-p2 and earlier, 2.4.3 and earlier and 2.3.7p1 and earlier are affected by a cross-site request forgery CSRF vulnerability via a Wishlist Share Link. Successful exploitation could lead to unauthorized addition to customer cart by an unauthenticated attacker. Access to...

CVE-2021-39864

CVE-2021-39864 is a CSRF vulnerability in Adobe Commerce / Magento Open Source via a Wishlist Share Link. Affected: Adobe Commerce versions 2.4.2-p2 and earlier, 2.4.3 and earlier, 2.3.7p1 and earlier. Impact: unauthenticated attacker could cause unauthorized additions to a customer’s cart withou...

CVE-2021-39864 Adobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart Addition

Adobe Commerce versions 2.4.2-p2 and earlier, 2.4.3 and earlier and 2.3.7p1 and earlier are affected by a cross-site request forgery CSRF vulnerability via a Wishlist Share Link. Successful exploitation could lead to unauthorized addition to customer cart by an unauthenticated attacker. Access to...

PT-2021-22711

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.3 and earlier, 2.4.2-p2 and earlier, 2.3.7p1 and earlier Description: A cross-site request forgery CSRF issue exists via a Wishlist Share Link, allowing an unauthenticated attacker to add items to a customer's cart...

CVE-2021-39864: Cross-Site Request Forgery (CSRF)

Adobe Commerce versions 2.4.2-p2 and earlier, 2.4.3 and earlier and 2.3.7p1 and earlier are affected by a cross-site request forgery CSRF vulnerability via a Wishlist Share Link. Successful exploitation could lead to unauthorized addition to customer cart by an unauthenticated attacker. Access to...

@36node/sketch-cli (>=0.1.3, <=0.3.2), @adobe/commerce-cif-commercetools-cart (>=1.0.1, <=1.0.2) +324 more potentially affected by CVE-2021-37713 via tar (>=4.0.1, <=4.4.15)

tar NPM version =4.0.1, =0.1.3, =1.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.1, =1.2.1 and more Source cves: CVE-2021-37713 Source advisory: OSV:GHSA-5955-9WPR-37JH...

APSB21-64 Security updates available for Magento

Magento has released updates for Adobe Commerce and Magento Open Source editions. These updates resolve vulnerabilities rated critical and important. Successful exploitation could lead to arbitrary code execution...

Adobe Commerce / Magento Detection (HTTP)

HTTP based detection of Adobe Commerce / Magento. SPDX-FileCopyrightText: 2015 SCHUTZWERK GmbH SPDX-FileCopyrightText: Reworked/extended detection code since 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...