https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 07:03:45 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-99779 cnvd-2021-99779 https://cve.radiocsirt.org/vuln/cnvd-2021-99779 https://cve.radiocsirt.org/vuln/euvd-2026-234625 EUVD-2026-234625 https://cve.radiocsirt.org/vuln/euvd-2026-234625 https://cve.radiocsirt.org/vuln/fkie_cve-2021-39864 <p>Adobe Commerce versions 2.4.2-p2 (and earlier), 2.4.3 (and earlier) and 2.3.7p1 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via a Wishlist Share Link. Successful exploitation could lead to unauthorized addition to customer cart by an unauthenticated attacker. Access to the admin console is not required for successful exploitation.</p> <p>Adobe Commerce versions 2.4.2-p2 (and earlier), 2.4.3 (and earlier) and 2.3.7p1 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via a Wishlist Share Link. Successful exploitation could lead to unauthorized addition to customer cart by an unauthenticated attacker. Access to the admin console is not required for successful exploitation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-39864 https://cve.radiocsirt.org/vuln/ghsa-94wq-87g6-8h77 <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>Adobe Commerce versions 2.4.2-p2 (and earlier), 2.4.3 (and earlier) and 2.3.7p1 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via a Wishlist Share Link. Successful exploitation could lead to unauthorized addition to a customer&#39;s cart by an unauthenticated attacker. Access to the admin console is not required for successful exploitation.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>Adobe Commerce versions 2.4.2-p2 (and earlier), 2.4.3 (and earlier) and 2.3.7p1 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via a Wishlist Share Link. Successful exploitation could lead to unauthorized addition to a customer&#39;s cart by an unauthenticated attacker. Access to the admin console is not required for successful exploitation.</p> https://cve.radiocsirt.org/vuln/ghsa-94wq-87g6-8h77 https://cve.radiocsirt.org/vuln/gsd-2021-39864 gsd-2021-39864 https://cve.radiocsirt.org/vuln/gsd-2021-39864