https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 06:24:22 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01539 bdu:2021-01539 https://cve.radiocsirt.org/vuln/bdu:2021-01539 https://cve.radiocsirt.org/vuln/bit-magento-2021-21027 <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento versions 2.4.1 (and earlier), 2.4.0 (and earlier) and 2.3.6 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via the GraphQL API. Successful exploitation could lead to unauthorized modification of customer metadata by an unauthenticated attacker. Access to the admin console is not required for successful exploitation.</p> <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento versions 2.4.1 (and earlier), 2.4.0 (and earlier) and 2.3.6 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via the GraphQL API. Successful exploitation could lead to unauthorized modification of customer metadata by an unauthenticated attacker. Access to the admin console is not required for successful exploitation.</p> https://cve.radiocsirt.org/vuln/bit-magento-2021-21027 https://cve.radiocsirt.org/vuln/certfr-2021-avi-100 certfr-2021-avi-100 https://cve.radiocsirt.org/vuln/certfr-2021-avi-100 https://cve.radiocsirt.org/vuln/cnvd-2021-13919 cnvd-2021-13919 https://cve.radiocsirt.org/vuln/cnvd-2021-13919 https://cve.radiocsirt.org/vuln/euvd-2026-184585 EUVD-2026-184585 https://cve.radiocsirt.org/vuln/euvd-2026-184585 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21027 <p>Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via the GraphQL API. Successful exploitation could lead to unauthorized modification of customer metadata by an unauthenticated attacker. Access to the admin console is not required for successful exploitation.</p> <p>Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via the GraphQL API. Successful exploitation could lead to unauthorized modification of customer metadata by an unauthenticated attacker. Access to the admin console is not required for successful exploitation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21027 https://cve.radiocsirt.org/vuln/ghsa-h4xc-577p-hgj9 <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via the GraphQL API. Successful exploitation could lead to unauthorized modification of customer metadata by an unauthenticated attacker. Access to the admin console is not required for successful exploitation.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via the GraphQL API. Successful exploitation could lead to unauthorized modification of customer metadata by an unauthenticated attacker. Access to the admin console is not required for successful exploitation.</p> https://cve.radiocsirt.org/vuln/ghsa-h4xc-577p-hgj9 https://cve.radiocsirt.org/vuln/gsd-2021-21027 gsd-2021-21027 https://cve.radiocsirt.org/vuln/gsd-2021-21027