Most recent entries from all

bdu:2023-01175

BIT-magento-2022-42344 — [CVE-2021-36032] Magento IDOR Leads to Account Takeover

Affected: Bitnami: magento

Adobe Commerce versions 2.4.3 (and earlier), 2.3.7 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and privilege escalation.

cnvd-2024-25611

EUVD-2026-164094

fkie_cve-2022-42344

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and privilege escalation.

GHSA-297f-r9w7-w492 — Magento Improper input validation vulnerability

Affected: Packagist: magento/community-edition

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an improper input validation vulnerability. An authenticated attacker can trigger an insecure direct object reference in the `V1/customers/me` endpoint to achieve information exposure and privilege escalation.