Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2022/05/24 5:41 p.m.•36 views

Magento improper authorization vulnerability in the integrations module

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin...

5.3CVSS6.9AI score0.01808EPSS
SaveExploits0References5Affected Software2
OSV
OSV
•added 2021/02/11 8:15 p.m.•23 views

CVE-2021-21026

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin...

5.3CVSS6.6AI score
SaveExploits0References1
Prion
Prion
•added 2021/02/11 8:15 p.m.•23 views

Authorization

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin...

4CVSS5.9AI score0.01808EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/02/11 7:29 p.m.•76 views

CVE-2021-21026

Magento exposes an improper authorization vulnerability in the integrations module affecting Magento Community/OOS and Commerce editions: versions 2.4.1 and earlier, 2.4.0-p1 and earlier, and 2.3.6 and earlier are impacted. The root cause is improper authorization, potentially allowing an unauthe...

5.3CVSS5.5AI score0.01808EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2021/02/11 7:29 p.m.•4 views

CVE-2021-21026

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin...

6CVSS0.01808EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/11 12:00 a.m.•5 views

CVE-2021-21026: Improper Authorization

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin...

5.3CVSS5.8AI score0.01808EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/02/09 12:00 a.m.•10 views

PT-2021-2309 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.1 and earlier Magento versions 2.4.0-p1 and earlier Magento versions 2.3.6 and earlier Description: The issue is related to improper authorization in the integrations module of Magento Commerce, which can be exploited by ...

5.3CVSS5.6AI score0.01808EPSS
SaveExploits0References10
Rows per page
Query Builder