2 matches found
GHSA-3G7M-G8QM-X6J5 Magento discloses sensitive information
Magento Commerce versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an improper input validation vulnerability via the quoteId parameter. An attacker can abuse this vulnerability to disclose sensitive information...
6.5CVSS6.6AI score0.01747EPSS
SaveExploits0References3
20