CVE-2020-24404 Incorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST API

Magento version 2.4.0 and 2.3.5p1 and earlier are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization...

Open redirect

Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the link parameter...

PT-2015-7632

Name of the Vulnerable Software and Affected Versions Kentico CMS versions 8.2 through 8.2.41 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the link parameter in the CMSPages/GetDocLink.ashx endpoint. Recommendatio...

CVE-2015-7823: Undefined Security Weakness

Open redirect vulnerability in CMSPages/GetDocLink.ashx in Kentico CMS 8.2 through 8.2.41 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the link parameter...