CVE-2021-21013

Magento CVE-2021-21013 describes an insecure direct object reference (IDOR) in the customer API module impacting Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier, and 2.3.6 and earlier. Successful exploitation could disclose sensitive information and allow updating information on another ...