CVE-2021-36023

Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.

CVSS 3.1 · 9.1 Critical EPSS 2.3% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-36036

Magento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code Execution

Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper access control vulnerability within Magento's Media Gallery Upload workflow. By storing a specially crafted file in the website gallery, an authenticated attacker with administrative privilege can gain access to delete the .htaccess file. This could result in the attacker achieving remote code execution.

CVSS 3.1 · 7.2 High EPSS 2.1% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2022-42344

[CVE-2021-36032] Magento IDOR Leads to Account Takeover

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and privilege escalation.

CVSS 3.1 · 8.8 High EPSS 1.3% KEV · Not listed

Vendors

Adobe Magento

Products

Commerce Magento

CVE-2021-36021

Magento Commerce CMS Page Improper Input Validation Could Lead To Remote Code Execution

Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper input validation vulnerability within the CMS page scheduled update feature. An authenticated attacker with administrative privilege could leverage this vulnerability to achieve remote code execution on the system.

CVSS 3.1 · 7.2 High EPSS 2.0% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-28585

Magento Commerce improper input validation in customer customer webapi

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper input validation vulnerability in the New customer WebAPI.Successful exploitation could allow an attacker to send unsolicited spam e-mails.

CVSS 3.1 · 5.3 Medium EPSS 1.6% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-28584

Magento Commerce path traversal vulnerability in child theme store creation

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Path Traversal vulnerability when creating a store with child theme.Successful exploitation could lead to arbitrary file system write by an authenticated attacker. Access to the admin console is required for successful exploitation.

CVSS 3.1 · 5.4 Medium EPSS 1.8% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-28583

Magento Commerce insecure storage of sensitive documentation

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Violation of Secure Design Principles vulnerability in RMA PDF filename formats. Successful exploitation could allow an attacker to get unauthorized access to restricted resources.

CVSS 3.1 · 7.5 High EPSS 1.9% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-28567

Magento Commerce improper authorization allows an authenticated user to perform certain functions without permission

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Improper Authorization vulnerability in the customers module. Successful exploitation could allow a low-privileged user to modify customer data. Access to the admin console is required for successful exploitation.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-28566

Magento Commerce information disclosure during upload action leveraging a specially crafted file

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Information Disclosure vulnerability when uploading a modified png file to a product image. Successful exploitation could lead to the disclosure of document root path by an unauthenticated attacker. Access to the admin console is required for successful exploitation.

CVSS 3.1 · 3.7 Low EPSS 1.4% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-28563

Magento Commerce improper Authorization via the 'Create Customer' endpoint

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper Authorization vulnerability via the 'Create Customer' endpoint. Successful exploitation could lead to unauthorized modification of customer data by an unauthenticated attacker. Access to the admin console is required for successful exploitation.

CVSS 3.1 · 6.5 Medium EPSS 1.4% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-28556

Magento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a DOM-based Cross-Site Scripting vulnerability on mage-messages cookies. Successful exploitation could lead to arbitrary JavaScript execution by an unauthenticated attacker. User interaction is required for successful exploitation.

CVSS 3.1 · 6.9 Medium EPSS 1.4% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-21032

Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation of this issue could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation.

CVSS 3.0 · 5.6 Medium EPSS 1.5% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-21031

Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation.

CVSS 3.0 · 5.6 Medium EPSS 1.6% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-21030

Magento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a stored cross-site scripting (XSS) in the customer address upload feature. Successful exploitation could lead to arbitrary JavaScript execution in the victim's browser. Exploitation of this issue requires user interaction.

CVSS 3.0 · 8.1 High EPSS 5.7% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-21029

Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a Reflected Cross-site Scripting vulnerability via 'file' parameter. Successful exploitation could lead to arbitrary JavaScript execution in the victim's browser. Access to the admin console is required for successful exploitation.

CVSS 3.1 · 4.8 Medium EPSS 85.2% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-21027

Magento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data Modification

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via the GraphQL API. Successful exploitation could lead to unauthorized modification of customer metadata by an unauthenticated attacker. Access to the admin console is not required for successful exploitation.

CVSS 3.0 · 4.3 Medium EPSS 1.6% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-21026

Magento Commerce Incorrect permissions Could Lead To Unauthorized Access

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin console is required for successful exploitation.

CVSS 3.0 · 5.3 Medium EPSS 1.7% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-21025

Magento Commerce XML Injection Could Lead To Arbitrary Code Execution

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the product layout updates. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.

CVSS 3.0 · 9.1 Critical EPSS 3.2% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-21024

Magento Commerce Blind SQL Injection Could Lead To Unauthorized Access

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a blind SQL injection vulnerability in the Search module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin console is required for successful exploitation.

CVSS 3.0 · 9.1 Critical EPSS 2.6% KEV · Not listed

Vendors

Magento

Products

Magento

CVE-2021-21023

Magento Commerce Stored Cross Site Scripting Vulnerability Could Lead To Arbitrary Code Execution

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a stored cross-site scripting vulnerability in the admin console. Successful exploitation could lead to arbitrary JavaScript execution in the victim's browser. Access to the admin console is required for successful exploitation.

CVSS 3.0 · 4.8 Medium EPSS 1.6% KEV · Not listed

Vendors

Magento

Products

Magento