Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 12:23:59 +0000 bdu:2020-05131 https://cve.radiocsirt.org/vuln/bdu:2020-05131 bdu:2020-05131 https://cve.radiocsirt.org/vuln/bdu:2020-05131 BIT-magento-2020-24404 — Incorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST API https://cve.radiocsirt.org/vuln/bit-magento-2020-24404 <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization.</p> <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization.</p> https://cve.radiocsirt.org/vuln/bit-magento-2020-24404 certfr-2020-avi-648 — De multiples vulnérabilités ont été découvertes dans Magento. Certaines d'entre elles permettent à un attaquant de prov… https://cve.radiocsirt.org/vuln/certfr-2020-avi-648 certfr-2020-avi-648 https://cve.radiocsirt.org/vuln/certfr-2020-avi-648 cnvd-2020-57884 https://cve.radiocsirt.org/vuln/cnvd-2020-57884 cnvd-2020-57884 https://cve.radiocsirt.org/vuln/cnvd-2020-57884 EUVD-2026-166622 https://cve.radiocsirt.org/vuln/euvd-2026-166622 EUVD-2026-166622 https://cve.radiocsirt.org/vuln/euvd-2026-166622 fkie_cve-2020-24404 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24404 <p>Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization.</p> <p>Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-24404 GHSA-rwf7-652f-76mv — Magento 2 Community Edition vulnerable to Improper Authorization https://cve.radiocsirt.org/vuln/ghsa-rwf7-652f-76mv <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization.</p> https://cve.radiocsirt.org/vuln/ghsa-rwf7-652f-76mv gsd-2020-24404 https://cve.radiocsirt.org/vuln/gsd-2020-24404 gsd-2020-24404 https://cve.radiocsirt.org/vuln/gsd-2020-24404