https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:12:28 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-03277 bdu:2021-03277 https://cve.radiocsirt.org/vuln/bdu:2021-03277 https://cve.radiocsirt.org/vuln/bit-magento-2021-28566 <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento versions 2.4.2 (and earlier), 2.4.1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure of document root path by an unauthenticated attacker. Access to the admin console is required for successful exploitation.</p> <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento versions 2.4.2 (and earlier), 2.4.1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure of document root path by an unauthenticated attacker. Access to the admin console is required for successful exploitation.</p> https://cve.radiocsirt.org/vuln/bit-magento-2021-28566 https://cve.radiocsirt.org/vuln/certfr-2021-avi-376 certfr-2021-avi-376 https://cve.radiocsirt.org/vuln/certfr-2021-avi-376 https://cve.radiocsirt.org/vuln/euvd-2026-163687 EUVD-2026-163687 https://cve.radiocsirt.org/vuln/euvd-2026-163687 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28566 <p>Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure of document root path by an unauthenticated attacker. Access to the admin console is required for successful exploitation.</p> <p>Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure of document root path by an unauthenticated attacker. Access to the admin console is required for successful exploitation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-28566 https://cve.radiocsirt.org/vuln/ghsa-w942-fw92-mqm2 <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure of document root path by an unauthenticated attacker. Access to the admin console is required for successful exploitation.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure of document root path by an unauthenticated attacker. Access to the admin console is required for successful exploitation.</p> https://cve.radiocsirt.org/vuln/ghsa-w942-fw92-mqm2 https://cve.radiocsirt.org/vuln/gsd-2021-28566 gsd-2021-28566 https://cve.radiocsirt.org/vuln/gsd-2021-28566