Advisory details:
github_osv / GHSA-rhff-65hp-55rw
| Advisory ID | github_osv/GHSA-rhff-65hp-55rw |
| Aliases |
CVE-2021-36030
|
| Summary | Magento allows attackers to alter the price of items Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter the price of items. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 0.0 |
| Risk | |
| Affected and Fixed Packages | Package Details |
| Introduced and Fixed Package Commit Patches | Package Commit Patches Details |
| CWE-20 | Improper Input Validation |
| System | Score | Found at |
|---|---|---|
| generic_textual | HIGH |
| Reference id | Reference type | URL |
|---|---|---|
| https://github.com/magento/magento2 | ||
| apsb21-64.html | Advisory | https://helpx.adobe.com/security/products/magento/apsb21-64.html |
| CVE-2021-36030 | https://nvd.nist.gov/vuln/detail/CVE-2021-36030 |
No EPSS data available for this advisory.
| Patch URL | |
|---|---|
| There are no known patches. | |
There are no SSVC decisions available.