https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:19:43 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-01372 bdu:2022-01372 https://cve.radiocsirt.org/vuln/bdu:2022-01372 https://cve.radiocsirt.org/vuln/bit-magento-2021-36036 <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento versions 2.4.2 (and earlier), 2.4.2 (and earlier) and 2.3.7 (and earlier) are affected by an improper access control vulnerability within Magento&#39;s Media Gallery Upload workflow. By storing a specially crafted file in the website gallery, an authenticated attacker with administrative privilege can gain access to delete the .htaccess file. This could result in the attacker achieving remote code execution.</p> <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento versions 2.4.2 (and earlier), 2.4.2 (and earlier) and 2.3.7 (and earlier) are affected by an improper access control vulnerability within Magento&#39;s Media Gallery Upload workflow. By storing a specially crafted file in the website gallery, an authenticated attacker with administrative privilege can gain access to delete the .htaccess file. This could result in the attacker achieving remote code execution.</p> https://cve.radiocsirt.org/vuln/bit-magento-2021-36036 https://cve.radiocsirt.org/vuln/certfr-2021-avi-609 certfr-2021-avi-609 https://cve.radiocsirt.org/vuln/certfr-2021-avi-609 https://cve.radiocsirt.org/vuln/euvd-2026-219732 EUVD-2026-219732 https://cve.radiocsirt.org/vuln/euvd-2026-219732 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36036 <p>Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper access control vulnerability within Magento&#39;s Media Gallery Upload workflow. By storing a specially crafted file in the website gallery, an authenticated attacker with administrative privilege can gain access to delete the .htaccess file. This could result in the attacker achieving remote code execution.</p> <p>Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper access control vulnerability within Magento&#39;s Media Gallery Upload workflow. By storing a specially crafted file in the website gallery, an authenticated attacker with administrative privilege can gain access to delete the .htaccess file. This could result in the attacker achieving remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-36036 https://cve.radiocsirt.org/vuln/ghsa-wqr6-wv6c-p8fx <p><strong>Affected:</strong> Packagist: magento/project-community-edition, Packagist: magento/community-edition</p> <p>Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper access control vulnerability within Magento&#39;s Media Gallery Upload workflow. By storing a specially crafted file in the website gallery, an authenticated attacker with administrative privilege can gain access to delete the .htaccess file. This could result in the attacker achieving remote code execution.</p> <p><strong>Affected:</strong> Packagist: magento/project-community-edition, Packagist: magento/community-edition</p> <p>Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper access control vulnerability within Magento&#39;s Media Gallery Upload workflow. By storing a specially crafted file in the website gallery, an authenticated attacker with administrative privilege can gain access to delete the .htaccess file. This could result in the attacker achieving remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-wqr6-wv6c-p8fx https://cve.radiocsirt.org/vuln/gsd-2021-36036 gsd-2021-36036 https://cve.radiocsirt.org/vuln/gsd-2021-36036