Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-jr49-4fs3-8qcp
Summary
Improper Authorization vulnerability in Magento and Adobe Commerce
Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
Aliases
0
alias CVE-2025-24434
1
alias GHSA-fppq-f2m6-xv5c
Fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p12
purl pkg:composer/magento/community-edition@2.4.4-p12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p12
1
url pkg:composer/magento/community-edition@2.4.5-p11
purl pkg:composer/magento/community-edition@2.4.5-p11
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p11
2
url pkg:composer/magento/community-edition@2.4.6-p9
purl pkg:composer/magento/community-edition@2.4.6-p9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p9
3
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
4
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
Affected_packages
0
url pkg:composer/magento/community-edition@2.4.5-p1
purl pkg:composer/magento/community-edition@2.4.5-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2h52-3pt6-dfcw
1
vulnerability VCID-2vsw-t8k2-4bfm
2
vulnerability VCID-3et4-3zad-1qfn
3
vulnerability VCID-3zcy-b3th-ukhd
4
vulnerability VCID-525q-afzj-tkcp
5
vulnerability VCID-5gxr-xksz-5ydb
6
vulnerability VCID-6t9w-cnkz-s3c3
7
vulnerability VCID-6tx4-wexr-fkbb
8
vulnerability VCID-7ewa-w75h-qfdy
9
vulnerability VCID-7hrm-jtbx-sqgm
10
vulnerability VCID-7pr7-uqp1-sugt
11
vulnerability VCID-7s3w-8dn6-jqh7
12
vulnerability VCID-7s74-rdkp-vyaf
13
vulnerability VCID-7s7e-adr6-h3dc
14
vulnerability VCID-8hx4-r8bb-n7ge
15
vulnerability VCID-8ky6-w2nk-9bds
16
vulnerability VCID-8msu-s38a-p7e3
17
vulnerability VCID-8shb-t5zp-rqbu
18
vulnerability VCID-9cc9-npdc-8bac
19
vulnerability VCID-9vrt-uccb-myev
20
vulnerability VCID-a8gs-ervm-e3hm
21
vulnerability VCID-a9b6-tenb-afdw
22
vulnerability VCID-agtm-nkhp-dkdn
23
vulnerability VCID-ayfe-5a7g-u7b7
24
vulnerability VCID-az2w-5xhy-5fe4
25
vulnerability VCID-b3cn-pjp3-4yhm
26
vulnerability VCID-b4jg-dj1a-9qd5
27
vulnerability VCID-b9ry-u6qy-j7cc
28
vulnerability VCID-bch8-kq49-skhm
29
vulnerability VCID-bera-73sm-bbh7
30
vulnerability VCID-bkpz-ratd-e7ab
31
vulnerability VCID-bzyh-c5tm-j7dn
32
vulnerability VCID-cc8x-6es1-8kc5
33
vulnerability VCID-cgwk-hn4t-n7c1
34
vulnerability VCID-cqjn-3z6n-sff1
35
vulnerability VCID-d2ab-j8bf-e7dx
36
vulnerability VCID-d6mk-hg8h-7qbc
37
vulnerability VCID-dpgz-dacm-sqg6
38
vulnerability VCID-du16-f2wp-t3cw
39
vulnerability VCID-dur2-pfke-h7hf
40
vulnerability VCID-dx43-89w9-a7dg
41
vulnerability VCID-e7zd-dn28-4bf1
42
vulnerability VCID-e9zx-zy9y-2fcp
43
vulnerability VCID-eahe-s41f-ckc1
44
vulnerability VCID-egy6-nku7-zyap
45
vulnerability VCID-evth-swm9-k3de
46
vulnerability VCID-fz5y-um7w-63f4
47
vulnerability VCID-fzam-yuyg-qyd5
48
vulnerability VCID-fzm9-e6bg-r7aw
49
vulnerability VCID-gedj-39p5-ubd6
50
vulnerability VCID-gxj9-a1hc-47de
51
vulnerability VCID-hbau-7tvg-cygz
52
vulnerability VCID-hfbb-ax6r-tbaz
53
vulnerability VCID-hh8a-mgkk-3yb5
54
vulnerability VCID-j124-q39m-mkby
55
vulnerability VCID-j5vp-2jrx-ukf4
56
vulnerability VCID-j6ss-8f4e-e7g2
57
vulnerability VCID-jhd5-tqph-3ufu
58
vulnerability VCID-jr49-4fs3-8qcp
59
vulnerability VCID-kezx-5nw5-hfen
60
vulnerability VCID-kje4-asu6-dfg2
61
vulnerability VCID-kq4m-anrt-rugn
62
vulnerability VCID-kuzc-uv5b-v7an
63
vulnerability VCID-kxnm-y19k-mqg2
64
vulnerability VCID-m5z8-hz81-j7b7
65
vulnerability VCID-m83v-51cy-uqar
66
vulnerability VCID-mhvf-2keh-2qar
67
vulnerability VCID-mjb6-7au8-5fdx
68
vulnerability VCID-msac-ptqf-pyg1
69
vulnerability VCID-mtr5-suag-2bdj
70
vulnerability VCID-ns8t-vtcn-aqh4
71
vulnerability VCID-p222-28c1-vfhy
72
vulnerability VCID-qfw5-3tdu-x7g4
73
vulnerability VCID-qgpx-hgzu-5qgp
74
vulnerability VCID-qj4x-u7gx-9uf1
75
vulnerability VCID-qp7s-amch-v3cd
76
vulnerability VCID-qzqd-271b-ybfj
77
vulnerability VCID-r4bw-w4t9-23ek
78
vulnerability VCID-r7nh-arcj-8fb3
79
vulnerability VCID-rbjk-3gcs-2qb5
80
vulnerability VCID-rduw-apr6-4fdu
81
vulnerability VCID-re84-qg3k-3ub3
82
vulnerability VCID-rf6p-ct86-5bgz
83
vulnerability VCID-ruru-fwmn-5kes
84
vulnerability VCID-rxac-w9pd-aqe1
85
vulnerability VCID-s4bp-kzfu-8qfy
86
vulnerability VCID-s5e2-d6n8-kkbr
87
vulnerability VCID-scg7-ugdn-53b9
88
vulnerability VCID-shfz-pxan-v3ar
89
vulnerability VCID-te3b-exz5-zke1
90
vulnerability VCID-tvz9-8s4d-gbg6
91
vulnerability VCID-txb3-ez5r-r7ek
92
vulnerability VCID-ugyc-gehq-rudu
93
vulnerability VCID-upcj-z3c1-ubcf
94
vulnerability VCID-vu36-a1g1-nugt
95
vulnerability VCID-vx13-4b1d-wbgp
96
vulnerability VCID-w3zd-fezc-nuhd
97
vulnerability VCID-wjfe-wh5k-1qft
98
vulnerability VCID-ws6y-k3tx-r3gb
99
vulnerability VCID-wvyx-2bbb-9yf7
100
vulnerability VCID-x46d-a16g-nkg9
101
vulnerability VCID-xfvu-2zg4-ruf6
102
vulnerability VCID-xk5y-7a1w-zba9
103
vulnerability VCID-xsq8-ztqh-ubb8
104
vulnerability VCID-y1v3-9tyq-uqhd
105
vulnerability VCID-y4r1-yr69-uuf6
106
vulnerability VCID-y4u6-cy8y-hyae
107
vulnerability VCID-y7x4-664r-3fbk
108
vulnerability VCID-yuvf-e7hk-kqf9
109
vulnerability VCID-z2v2-n138-6ydv
110
vulnerability VCID-zdpz-8tc2-6kah
111
vulnerability VCID-zt9b-9sjx-7qb4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p1
1
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1jsp-392b-2fgb
1
vulnerability VCID-2vsw-t8k2-4bfm
2
vulnerability VCID-3g5s-hryc-5qa9
3
vulnerability VCID-3zcy-b3th-ukhd
4
vulnerability VCID-4dae-vty8-b7hk
5
vulnerability VCID-5gxr-xksz-5ydb
6
vulnerability VCID-6p6q-ctya-q3bv
7
vulnerability VCID-6t9w-cnkz-s3c3
8
vulnerability VCID-6tx4-wexr-fkbb
9
vulnerability VCID-7hrm-jtbx-sqgm
10
vulnerability VCID-7pr7-uqp1-sugt
11
vulnerability VCID-7s3w-8dn6-jqh7
12
vulnerability VCID-7s74-rdkp-vyaf
13
vulnerability VCID-8hx4-r8bb-n7ge
14
vulnerability VCID-8ky6-w2nk-9bds
15
vulnerability VCID-8msu-s38a-p7e3
16
vulnerability VCID-8shb-t5zp-rqbu
17
vulnerability VCID-9cc9-npdc-8bac
18
vulnerability VCID-9vrt-uccb-myev
19
vulnerability VCID-a8gs-ervm-e3hm
20
vulnerability VCID-a9b6-tenb-afdw
21
vulnerability VCID-agtm-nkhp-dkdn
22
vulnerability VCID-ayfe-5a7g-u7b7
23
vulnerability VCID-b3cn-pjp3-4yhm
24
vulnerability VCID-b4jg-dj1a-9qd5
25
vulnerability VCID-b9ry-u6qy-j7cc
26
vulnerability VCID-bch8-kq49-skhm
27
vulnerability VCID-bera-73sm-bbh7
28
vulnerability VCID-bkpz-ratd-e7ab
29
vulnerability VCID-bzyh-c5tm-j7dn
30
vulnerability VCID-cc8x-6es1-8kc5
31
vulnerability VCID-ccx1-qacj-2qev
32
vulnerability VCID-cgwk-hn4t-n7c1
33
vulnerability VCID-cm2a-1yc5-v3cy
34
vulnerability VCID-cqjn-3z6n-sff1
35
vulnerability VCID-d6mk-hg8h-7qbc
36
vulnerability VCID-dpgz-dacm-sqg6
37
vulnerability VCID-du16-f2wp-t3cw
38
vulnerability VCID-dur2-pfke-h7hf
39
vulnerability VCID-e7zd-dn28-4bf1
40
vulnerability VCID-e9zx-zy9y-2fcp
41
vulnerability VCID-eahe-s41f-ckc1
42
vulnerability VCID-egy6-nku7-zyap
43
vulnerability VCID-evth-swm9-k3de
44
vulnerability VCID-eygc-ra9u-gyej
45
vulnerability VCID-fz5y-um7w-63f4
46
vulnerability VCID-fzm9-e6bg-r7aw
47
vulnerability VCID-gedj-39p5-ubd6
48
vulnerability VCID-gxj9-a1hc-47de
49
vulnerability VCID-hbau-7tvg-cygz
50
vulnerability VCID-hfbb-ax6r-tbaz
51
vulnerability VCID-j124-q39m-mkby
52
vulnerability VCID-j5vp-2jrx-ukf4
53
vulnerability VCID-j6ss-8f4e-e7g2
54
vulnerability VCID-jhd5-tqph-3ufu
55
vulnerability VCID-jr49-4fs3-8qcp
56
vulnerability VCID-kezx-5nw5-hfen
57
vulnerability VCID-kje4-asu6-dfg2
58
vulnerability VCID-kq4m-anrt-rugn
59
vulnerability VCID-kuzc-uv5b-v7an
60
vulnerability VCID-kxnm-y19k-mqg2
61
vulnerability VCID-m5z8-hz81-j7b7
62
vulnerability VCID-m83v-51cy-uqar
63
vulnerability VCID-md7v-w5aq-t7h1
64
vulnerability VCID-mhvf-2keh-2qar
65
vulnerability VCID-mjb6-7au8-5fdx
66
vulnerability VCID-msac-ptqf-pyg1
67
vulnerability VCID-ns8t-vtcn-aqh4
68
vulnerability VCID-p222-28c1-vfhy
69
vulnerability VCID-qfw5-3tdu-x7g4
70
vulnerability VCID-qgpx-hgzu-5qgp
71
vulnerability VCID-qj4x-u7gx-9uf1
72
vulnerability VCID-qp7s-amch-v3cd
73
vulnerability VCID-qzqd-271b-ybfj
74
vulnerability VCID-r4bw-w4t9-23ek
75
vulnerability VCID-r7nh-arcj-8fb3
76
vulnerability VCID-rbjk-3gcs-2qb5
77
vulnerability VCID-rduw-apr6-4fdu
78
vulnerability VCID-re84-qg3k-3ub3
79
vulnerability VCID-rf6p-ct86-5bgz
80
vulnerability VCID-ruru-fwmn-5kes
81
vulnerability VCID-rxac-w9pd-aqe1
82
vulnerability VCID-s4bp-kzfu-8qfy
83
vulnerability VCID-s5e2-d6n8-kkbr
84
vulnerability VCID-scg7-ugdn-53b9
85
vulnerability VCID-shfz-pxan-v3ar
86
vulnerability VCID-tc3m-4bkg-qkcf
87
vulnerability VCID-te3b-exz5-zke1
88
vulnerability VCID-tvz9-8s4d-gbg6
89
vulnerability VCID-txb3-ez5r-r7ek
90
vulnerability VCID-tzug-ckkn-dyft
91
vulnerability VCID-ugyc-gehq-rudu
92
vulnerability VCID-vu36-a1g1-nugt
93
vulnerability VCID-vx13-4b1d-wbgp
94
vulnerability VCID-w3zd-fezc-nuhd
95
vulnerability VCID-wvyx-2bbb-9yf7
96
vulnerability VCID-wzu6-rbsv-mkde
97
vulnerability VCID-xfvu-2zg4-ruf6
98
vulnerability VCID-xk5y-7a1w-zba9
99
vulnerability VCID-xsq8-ztqh-ubb8
100
vulnerability VCID-y1v3-9tyq-uqhd
101
vulnerability VCID-y4r1-yr69-uuf6
102
vulnerability VCID-y4u6-cy8y-hyae
103
vulnerability VCID-y7x4-664r-3fbk
104
vulnerability VCID-z2v2-n138-6ydv
105
vulnerability VCID-zdpz-8tc2-6kah
106
vulnerability VCID-zt9b-9sjx-7qb4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
2
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1jsp-392b-2fgb
1
vulnerability VCID-2vsw-t8k2-4bfm
2
vulnerability VCID-3g5s-hryc-5qa9
3
vulnerability VCID-3zcy-b3th-ukhd
4
vulnerability VCID-4dae-vty8-b7hk
5
vulnerability VCID-5gxr-xksz-5ydb
6
vulnerability VCID-6p6q-ctya-q3bv
7
vulnerability VCID-6t9w-cnkz-s3c3
8
vulnerability VCID-6tx4-wexr-fkbb
9
vulnerability VCID-7hrm-jtbx-sqgm
10
vulnerability VCID-7pr7-uqp1-sugt
11
vulnerability VCID-7s3w-8dn6-jqh7
12
vulnerability VCID-7s74-rdkp-vyaf
13
vulnerability VCID-8hx4-r8bb-n7ge
14
vulnerability VCID-8ky6-w2nk-9bds
15
vulnerability VCID-8msu-s38a-p7e3
16
vulnerability VCID-8shb-t5zp-rqbu
17
vulnerability VCID-9cc9-npdc-8bac
18
vulnerability VCID-9vrt-uccb-myev
19
vulnerability VCID-a8gs-ervm-e3hm
20
vulnerability VCID-a9b6-tenb-afdw
21
vulnerability VCID-agtm-nkhp-dkdn
22
vulnerability VCID-b3cn-pjp3-4yhm
23
vulnerability VCID-b4jg-dj1a-9qd5
24
vulnerability VCID-b9ry-u6qy-j7cc
25
vulnerability VCID-bch8-kq49-skhm
26
vulnerability VCID-cafy-5dd8-rudj
27
vulnerability VCID-cc8x-6es1-8kc5
28
vulnerability VCID-ccx1-qacj-2qev
29
vulnerability VCID-cm2a-1yc5-v3cy
30
vulnerability VCID-cqjn-3z6n-sff1
31
vulnerability VCID-d6mk-hg8h-7qbc
32
vulnerability VCID-dj5a-35gt-u7dn
33
vulnerability VCID-dpgz-dacm-sqg6
34
vulnerability VCID-e9zx-zy9y-2fcp
35
vulnerability VCID-eahe-s41f-ckc1
36
vulnerability VCID-egy6-nku7-zyap
37
vulnerability VCID-evth-swm9-k3de
38
vulnerability VCID-eygc-ra9u-gyej
39
vulnerability VCID-fz5y-um7w-63f4
40
vulnerability VCID-gedj-39p5-ubd6
41
vulnerability VCID-gxj9-a1hc-47de
42
vulnerability VCID-hbau-7tvg-cygz
43
vulnerability VCID-j6ss-8f4e-e7g2
44
vulnerability VCID-jr49-4fs3-8qcp
45
vulnerability VCID-kezx-5nw5-hfen
46
vulnerability VCID-kje4-asu6-dfg2
47
vulnerability VCID-kxnm-y19k-mqg2
48
vulnerability VCID-m5z8-hz81-j7b7
49
vulnerability VCID-m83v-51cy-uqar
50
vulnerability VCID-md7v-w5aq-t7h1
51
vulnerability VCID-mhvf-2keh-2qar
52
vulnerability VCID-mjb6-7au8-5fdx
53
vulnerability VCID-ns8t-vtcn-aqh4
54
vulnerability VCID-qfw5-3tdu-x7g4
55
vulnerability VCID-qgpx-hgzu-5qgp
56
vulnerability VCID-qj4x-u7gx-9uf1
57
vulnerability VCID-qp7s-amch-v3cd
58
vulnerability VCID-qrwc-3gsb-zkfy
59
vulnerability VCID-qzqd-271b-ybfj
60
vulnerability VCID-r4bw-w4t9-23ek
61
vulnerability VCID-r7nh-arcj-8fb3
62
vulnerability VCID-rbjk-3gcs-2qb5
63
vulnerability VCID-rduw-apr6-4fdu
64
vulnerability VCID-re84-qg3k-3ub3
65
vulnerability VCID-rf6p-ct86-5bgz
66
vulnerability VCID-ruru-fwmn-5kes
67
vulnerability VCID-rxac-w9pd-aqe1
68
vulnerability VCID-s4bp-kzfu-8qfy
69
vulnerability VCID-s5e2-d6n8-kkbr
70
vulnerability VCID-scg7-ugdn-53b9
71
vulnerability VCID-tc3m-4bkg-qkcf
72
vulnerability VCID-te3b-exz5-zke1
73
vulnerability VCID-th7y-aj51-mbaj
74
vulnerability VCID-tvz9-8s4d-gbg6
75
vulnerability VCID-txb3-ez5r-r7ek
76
vulnerability VCID-tzug-ckkn-dyft
77
vulnerability VCID-ugyc-gehq-rudu
78
vulnerability VCID-vu36-a1g1-nugt
79
vulnerability VCID-vx13-4b1d-wbgp
80
vulnerability VCID-wvyx-2bbb-9yf7
81
vulnerability VCID-wzu6-rbsv-mkde
82
vulnerability VCID-xk5y-7a1w-zba9
83
vulnerability VCID-xsq8-ztqh-ubb8
84
vulnerability VCID-y1v3-9tyq-uqhd
85
vulnerability VCID-y4r1-yr69-uuf6
86
vulnerability VCID-y7x4-664r-3fbk
87
vulnerability VCID-yyq6-dvyx-3bb9
88
vulnerability VCID-z2v2-n138-6ydv
89
vulnerability VCID-zdpz-8tc2-6kah
90
vulnerability VCID-zt9b-9sjx-7qb4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
3
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1jsp-392b-2fgb
1
vulnerability VCID-2vsw-t8k2-4bfm
2
vulnerability VCID-3g5s-hryc-5qa9
3
vulnerability VCID-6tx4-wexr-fkbb
4
vulnerability VCID-7s74-rdkp-vyaf
5
vulnerability VCID-8hx4-r8bb-n7ge
6
vulnerability VCID-8ky6-w2nk-9bds
7
vulnerability VCID-8shb-t5zp-rqbu
8
vulnerability VCID-a9b6-tenb-afdw
9
vulnerability VCID-b3cn-pjp3-4yhm
10
vulnerability VCID-cafy-5dd8-rudj
11
vulnerability VCID-ccx1-qacj-2qev
12
vulnerability VCID-cm2a-1yc5-v3cy
13
vulnerability VCID-d6mk-hg8h-7qbc
14
vulnerability VCID-dj5a-35gt-u7dn
15
vulnerability VCID-egy6-nku7-zyap
16
vulnerability VCID-eygc-ra9u-gyej
17
vulnerability VCID-fz5y-um7w-63f4
18
vulnerability VCID-gedj-39p5-ubd6
19
vulnerability VCID-hbau-7tvg-cygz
20
vulnerability VCID-j6ss-8f4e-e7g2
21
vulnerability VCID-jr49-4fs3-8qcp
22
vulnerability VCID-mhvf-2keh-2qar
23
vulnerability VCID-mjb6-7au8-5fdx
24
vulnerability VCID-qp7s-amch-v3cd
25
vulnerability VCID-qrwc-3gsb-zkfy
26
vulnerability VCID-qzqd-271b-ybfj
27
vulnerability VCID-r4bw-w4t9-23ek
28
vulnerability VCID-re84-qg3k-3ub3
29
vulnerability VCID-s4bp-kzfu-8qfy
30
vulnerability VCID-scg7-ugdn-53b9
31
vulnerability VCID-te3b-exz5-zke1
32
vulnerability VCID-th7y-aj51-mbaj
33
vulnerability VCID-tvz9-8s4d-gbg6
34
vulnerability VCID-tzug-ckkn-dyft
35
vulnerability VCID-wzu6-rbsv-mkde
36
vulnerability VCID-xfvu-2zg4-ruf6
37
vulnerability VCID-xsq8-ztqh-ubb8
38
vulnerability VCID-y7x4-664r-3fbk
39
vulnerability VCID-yyq6-dvyx-3bb9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
4
url pkg:composer/magento/project-community-edition@2.0.2
purl pkg:composer/magento/project-community-edition@2.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1jsp-392b-2fgb
1
vulnerability VCID-2h52-3pt6-dfcw
2
vulnerability VCID-2vsw-t8k2-4bfm
3
vulnerability VCID-2z3f-wtw6-yydf
4
vulnerability VCID-36ve-7wxt-z7fz
5
vulnerability VCID-3et4-3zad-1qfn
6
vulnerability VCID-3zcy-b3th-ukhd
7
vulnerability VCID-4dae-vty8-b7hk
8
vulnerability VCID-525q-afzj-tkcp
9
vulnerability VCID-5gxr-xksz-5ydb
10
vulnerability VCID-6p6q-ctya-q3bv
11
vulnerability VCID-6t9w-cnkz-s3c3
12
vulnerability VCID-6tx4-wexr-fkbb
13
vulnerability VCID-7hrm-jtbx-sqgm
14
vulnerability VCID-7s74-rdkp-vyaf
15
vulnerability VCID-7s7e-adr6-h3dc
16
vulnerability VCID-8hx4-r8bb-n7ge
17
vulnerability VCID-8ky6-w2nk-9bds
18
vulnerability VCID-8msu-s38a-p7e3
19
vulnerability VCID-8shb-t5zp-rqbu
20
vulnerability VCID-9cc9-npdc-8bac
21
vulnerability VCID-9vrt-uccb-myev
22
vulnerability VCID-a8gs-ervm-e3hm
23
vulnerability VCID-a9b6-tenb-afdw
24
vulnerability VCID-agtm-nkhp-dkdn
25
vulnerability VCID-az2w-5xhy-5fe4
26
vulnerability VCID-b3cn-pjp3-4yhm
27
vulnerability VCID-b4jg-dj1a-9qd5
28
vulnerability VCID-b5hn-f1qk-z7cu
29
vulnerability VCID-b9ry-u6qy-j7cc
30
vulnerability VCID-cafy-5dd8-rudj
31
vulnerability VCID-cc8x-6es1-8kc5
32
vulnerability VCID-ccx1-qacj-2qev
33
vulnerability VCID-cgwk-hn4t-n7c1
34
vulnerability VCID-cm2a-1yc5-v3cy
35
vulnerability VCID-cqjn-3z6n-sff1
36
vulnerability VCID-d2ab-j8bf-e7dx
37
vulnerability VCID-d6mk-hg8h-7qbc
38
vulnerability VCID-dj5a-35gt-u7dn
39
vulnerability VCID-dpgz-dacm-sqg6
40
vulnerability VCID-dx43-89w9-a7dg
41
vulnerability VCID-e9zx-zy9y-2fcp
42
vulnerability VCID-egy6-nku7-zyap
43
vulnerability VCID-eygc-ra9u-gyej
44
vulnerability VCID-fz5y-um7w-63f4
45
vulnerability VCID-fzam-yuyg-qyd5
46
vulnerability VCID-fzm9-e6bg-r7aw
47
vulnerability VCID-gedj-39p5-ubd6
48
vulnerability VCID-hbau-7tvg-cygz
49
vulnerability VCID-hh8a-mgkk-3yb5
50
vulnerability VCID-j124-q39m-mkby
51
vulnerability VCID-j5vp-2jrx-ukf4
52
vulnerability VCID-j6ss-8f4e-e7g2
53
vulnerability VCID-jhd5-tqph-3ufu
54
vulnerability VCID-jr49-4fs3-8qcp
55
vulnerability VCID-kezx-5nw5-hfen
56
vulnerability VCID-kxnm-y19k-mqg2
57
vulnerability VCID-m5z8-hz81-j7b7
58
vulnerability VCID-m83v-51cy-uqar
59
vulnerability VCID-md7v-w5aq-t7h1
60
vulnerability VCID-mhvf-2keh-2qar
61
vulnerability VCID-mjb6-7au8-5fdx
62
vulnerability VCID-msac-ptqf-pyg1
63
vulnerability VCID-mtr5-suag-2bdj
64
vulnerability VCID-nn21-hf8r-ykfd
65
vulnerability VCID-p222-28c1-vfhy
66
vulnerability VCID-qfw5-3tdu-x7g4
67
vulnerability VCID-qj4x-u7gx-9uf1
68
vulnerability VCID-qp7s-amch-v3cd
69
vulnerability VCID-qrwc-3gsb-zkfy
70
vulnerability VCID-qzqd-271b-ybfj
71
vulnerability VCID-r4bw-w4t9-23ek
72
vulnerability VCID-r7nh-arcj-8fb3
73
vulnerability VCID-rbjk-3gcs-2qb5
74
vulnerability VCID-re84-qg3k-3ub3
75
vulnerability VCID-rf6p-ct86-5bgz
76
vulnerability VCID-ruru-fwmn-5kes
77
vulnerability VCID-s4bp-kzfu-8qfy
78
vulnerability VCID-s5e2-d6n8-kkbr
79
vulnerability VCID-scg7-ugdn-53b9
80
vulnerability VCID-tc3m-4bkg-qkcf
81
vulnerability VCID-te3b-exz5-zke1
82
vulnerability VCID-th7y-aj51-mbaj
83
vulnerability VCID-tvz9-8s4d-gbg6
84
vulnerability VCID-tzug-ckkn-dyft
85
vulnerability VCID-upcj-z3c1-ubcf
86
vulnerability VCID-w3zd-fezc-nuhd
87
vulnerability VCID-wjfe-wh5k-1qft
88
vulnerability VCID-ws6y-k3tx-r3gb
89
vulnerability VCID-wzu6-rbsv-mkde
90
vulnerability VCID-x46d-a16g-nkg9
91
vulnerability VCID-xsq8-ztqh-ubb8
92
vulnerability VCID-y4r1-yr69-uuf6
93
vulnerability VCID-y7x4-664r-3fbk
94
vulnerability VCID-y93w-2qcc-wqg8
95
vulnerability VCID-yuvf-e7hk-kqf9
96
vulnerability VCID-yyq6-dvyx-3bb9
97
vulnerability VCID-zt9b-9sjx-7qb4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/project-community-edition@2.0.2
References
0
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
1
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24434
reference_id CVE-2025-24434
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24434
3
reference_url https://github.com/advisories/GHSA-fppq-f2m6-xv5c
reference_id GHSA-fppq-f2m6-xv5c
reference_type
scores
url https://github.com/advisories/GHSA-fppq-f2m6-xv5c
Weaknesses
0
cwe_id 285
name Improper Authorization
description The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
1
cwe_id 863
name Incorrect Authorization
description The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score9.0 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-jr49-4fs3-8qcp