CVE-2021-21032

CVE-2021-21032 affects Magento Commerce/Open Source: Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier, and 2.3.6 and earlier fail to correctly invalidate user sessions, potentially allowing unauthorized access to restricted resources without admin console access. The root cause is insuffi...

CVE-2021-21032

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier do not adequately invalidate user sessions. Successful exploitation of this issue could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation...