Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:32:37 +0000 CVE-2021-21013 — Magento Commerce Insecure Direct Object Reference Could Lead To Information Disclosure https://cve.radiocsirt.org/vuln/cve-2021-21013 <p><strong>Affected:</strong> Adobe Magento Commerce</p> <p>Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module. Successful exploitation could lead to sensitive information disclosure and update arbitrary information on another user&#39;s account.</p> <p><strong>Affected:</strong> Adobe Magento Commerce</p> <p>Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module. Successful exploitation could lead to sensitive information disclosure and update arbitrary information on another user&#39;s account.</p> https://cve.radiocsirt.org/vuln/cve-2021-21013