EUVD-2021-22669

Malware in sbrugna...

GHSA-WQR6-WV6C-P8FX Magento improper access control vulnerability within Magento's Media Gallery Upload workflow

Magento versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper access control vulnerability within Magento's Media Gallery Upload workflow. By storing a specially crafted file in the website gallery, an authenticated attacker with administrative privile...

PT-2021-6353 · Adobe · Magento

Name of the Vulnerable Software and Affected Versions: Magento versions 2.4.2 and earlier Magento versions 2.4.2-p1 and earlier Magento versions 2.3.7 and earlier Description: The issue is related to improper access control within Magento's Media Gallery Upload workflow. An authenticated attacker...