Backport for CVE-2021-21024 Blind SQLi from Magento 2

Impact This vulnerability allows an administrator unauthorized access to restricted resources. We fixed a vulnerability in the MySQL adapter to prevent SQL injection attacks. This is a backport of CVE-2021-21024 https://helpx.adobe.com/security/products/magento/apsb21-08.html. Patches Has the...

GHSA-FVRF-9428-527M Backport for CVE-2021-21024 Blind SQLi from Magento 2

Impact This vulnerability allows an administrator unauthorized access to restricted resources. We fixed a vulnerability in the MySQL adapter to prevent SQL injection attacks. This is a backport of CVE-2021-21024 https://helpx.adobe.com/security/products/magento/apsb21-08.html. Patches Has the...

PT-2021-14499

Name of the Vulnerable Software and Affected Versions magento-lts versions prior to 19.4.13 magento-lts versions prior to 20.0.9 Description A vulnerability in magento-lts potentially allows an administrator unauthorized access to restricted resources. This issue is related to a SQL injection...

PRODSECBUG-2198: SQL Injection due to a flaw in MySQL adapter

More info at https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13...