Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 20:23:31 +0000 bdu:2020-05127 https://cve.radiocsirt.org/vuln/bdu:2020-05127 bdu:2020-05127 https://cve.radiocsirt.org/vuln/bdu:2020-05127 BIT-magento-2020-24402 — Incorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST API https://cve.radiocsirt.org/vuln/bit-magento-2020-24402 <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorization.</p> <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorization.</p> https://cve.radiocsirt.org/vuln/bit-magento-2020-24402 certfr-2020-avi-648 — De multiples vulnérabilités ont été découvertes dans Magento. Certaines d'entre elles permettent à un attaquant de prov… https://cve.radiocsirt.org/vuln/certfr-2020-avi-648 certfr-2020-avi-648 https://cve.radiocsirt.org/vuln/certfr-2020-avi-648 cnvd-2020-57889 https://cve.radiocsirt.org/vuln/cnvd-2020-57889 cnvd-2020-57889 https://cve.radiocsirt.org/vuln/cnvd-2020-57889 EUVD-2026-169107 https://cve.radiocsirt.org/vuln/euvd-2026-169107 EUVD-2026-169107 https://cve.radiocsirt.org/vuln/euvd-2026-169107 fkie_cve-2020-24402 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24402 <p>Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorization.</p> <p>Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorization.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-24402 GHSA-hvf5-4jr9-fghh — Magento incorrect permissions vulnerability in the Integrations component https://cve.radiocsirt.org/vuln/ghsa-hvf5-4jr9-fghh <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorization.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer details via the REST API without authorization.</p> https://cve.radiocsirt.org/vuln/ghsa-hvf5-4jr9-fghh gsd-2020-24402 https://cve.radiocsirt.org/vuln/gsd-2020-24402 gsd-2020-24402 https://cve.radiocsirt.org/vuln/gsd-2020-24402