CVE-2021-21020

creationtimestamp| type| source ---|---|--- 2021-02-11 22:47:43+00:00| seen| https://t.me/cibsecurity/23468...

CVE-2021-21020 Magento Commerce Improper Access Control Vulnerability

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are vulnerable to an access control bypass vulnerability in the Login as Customer module. Successful exploitation could lead to unauthorized access to restricted resources...