Search for packages
| purl | pkg:composer/magento/community-edition@2.4.4-p11 |
| Next non-vulnerable version | 2.4.6-p9 |
| Latest non-vulnerable version | 2.4.9-alpha3 |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-r355-75hw-r8jf
Aliases: CVE-2025-54265 |
Magento allows incorrect authorization Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization … |
Vulnerable |
|
GHSA-qvwr-p3hj-j6jf
Aliases: CVE-2025-54267 |
Magento vulnerable to privilege escalation due to incorrect authorization Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are … |
Vulnerable |
|
GHSA-2768-5wmv-cfff
Aliases: CVE-2025-54264 |
Magento vulnerable to stored Cross-Site Scripting (XSS) Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by … |
Vulnerable |
|
GHSA-pcrx-r49h-x2w5
Aliases: CVE-2025-54266 |
Magento vulnerable to stored Cross-Site Scripting (XSS) Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by … |
Vulnerable |
|
GHSA-69x9-xp2j-w8g8
Aliases: CVE-2025-54263 |
Magento provides incorrect authorization through a security feature bypass Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are … |
Vulnerable |
|
GHSA-rr2g-rrjj-xw86
Aliases: CVE-2025-27188 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability … |
Vulnerable |
|
GHSA-6wq7-cg9h-mj6q
Aliases: CVE-2025-27190 |
Magento Improper Access Control leads to Security feature bypass Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected … |
Vulnerable |
|
GHSA-2r94-wm5v-4prx
Aliases: CVE-2025-27192 |
Magento does not properly protect credentials Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently … |
Vulnerable |
|
GHSA-vhcq-4xrm-2cr2
Aliases: CVE-2025-27191 |
Magento Improper Access Control leads to Security feature bypass Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected … |
Vulnerable |
|
GHSA-6ff8-jrfg-43hh
Aliases: CVE-2025-24425 |
Magento Business Logic Error vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Business … |
Vulnerable |
|
GHSA-rjjw-g6hw-7pc9
Aliases: CVE-2025-24416 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Vulnerable |
|
GHSA-v6r2-425c-hfrr
Aliases: CVE-2025-24421 |
Magento Incorrect Authorization vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization … |
Vulnerable |
|
GHSA-g3j6-9753-8mp2
Aliases: CVE-2025-24417 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Vulnerable |
|
GHSA-xwgx-8v72-4j5j
Aliases: CVE-2025-24413 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Vulnerable |
|
GHSA-3cfg-w257-cgf8
Aliases: CVE-2025-24408 |
Magento Information Exposure vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure … |
Vulnerable |
|
GHSA-gjxp-46rq-wg4q
Aliases: CVE-2025-24410 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Vulnerable |
|
GHSA-469f-wf4f-3jjv
Aliases: CVE-2025-24437 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-vw47-79jv-3598
Aliases: CVE-2025-24409 |
Adobe Commerce Improper Authorization vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-gc27-rvvm-q77r
Aliases: CVE-2025-24415 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Vulnerable |
|
GHSA-82p4-55gj-956p
Aliases: CVE-2025-24435 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-8884-7rm9-mrx4
Aliases: CVE-2025-24438 |
Magento stored Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Vulnerable |
|
GHSA-7jmr-43qj-pw47
Aliases: CVE-2025-24432 |
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by … |
Vulnerable |
|
GHSA-mm87-rrqx-94cr
Aliases: CVE-2025-24428 |
Magento stored Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Vulnerable |
|
GHSA-v3hq-g424-5mgg
Aliases: CVE-2025-24427 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-539v-w87w-w62c
Aliases: CVE-2025-24424 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-954p-ff72-327w
Aliases: CVE-2025-24406 |
Adobe Commerce Path Traversal Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation … |
Vulnerable |
|
GHSA-36hw-x3cc-m258
Aliases: CVE-2025-24411 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-656q-fx2w-8ccv
Aliases: CVE-2025-24429 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-6w27-c66f-gvhq
Aliases: CVE-2025-24430 |
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by … |
Vulnerable |
|
GHSA-fppq-f2m6-xv5c
Aliases: CVE-2025-24434 |
Improper Authorization vulnerability in Magento and Adobe Commerce Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected … |
Vulnerable |
|
GHSA-fhw6-3mj5-w9gv
Aliases: CVE-2025-24414 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Vulnerable |
|
GHSA-m4rg-mpp2-97px
Aliases: CVE-2025-24412 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
Vulnerable |
|
GHSA-ghpr-6qhr-rpp8
Aliases: CVE-2025-24436 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-g2pj-xmxq-3r9q
Aliases: CVE-2025-27206 |
Magento Improper Access Control leads to security feature bypass Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are … |
Vulnerable |
|
GHSA-85jx-x9r4-45m2
Aliases: CVE-2025-49549 |
Magento Authenticated Security feature bypass Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization … |
Vulnerable |
|
GHSA-r487-9vv5-75gg
Aliases: CVE-2025-43585 |
Magento Improper Authorization leading to security feature bypass Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by … |
Vulnerable |
|
GHSA-j934-vjh5-vf9r
Aliases: CVE-2025-47110 |
Magneto contains stored XSS vulnerability Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by a stored Cross-Site … |
Vulnerable |
|
GHSA-8hcx-xvww-6c6h
Aliases: CVE-2025-49550 |
Magento Security feature bypass Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability … |
Vulnerable |
|
GHSA-8mq8-c243-2335
Aliases: CVE-2025-49557 |
Magento Cross-site Scripting vulnerability Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored … | There are no reported fixed by versions. |
|
GHSA-5777-jj7p-mpqw
Aliases: CVE-2025-49555 |
Magento Cross-Site Request Forgery (CSRF) vulnerability Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a … |
Vulnerable |
|
GHSA-wcmw-8xpp-rwfj
Aliases: CVE-2025-49558 |
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by … |
Vulnerable |
|
GHSA-h4f4-gv6h-x824
Aliases: CVE-2025-49559 |
Magento vulnerable to path traversal Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-7hrj-3c9x-xv5h
Aliases: CVE-2025-49556 |
Magento has incorrect authorization issue that leads to arbitrary file system read Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 … |
Vulnerable |
|
GHSA-xgfm-992v-h2hr
Aliases: CVE-2025-49554 |
Magento vulnerable to denial of service Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an … |
Vulnerable |
|
GHSA-wh92-6q6g-px7j
Aliases: CVE-2025-54236 |
Magento Community Edition Improper Input Validation vulnerability Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected … | There are no reported fixed by versions. |
|
GHSA-c9h9-h5gf-885r
Aliases: CVE-2024-20716 |
Magento Open Source allows Uncontrolled Resource Consumption Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled … |
Vulnerable |
|
GHSA-264g-f7v8-q5qq
Aliases: CVE-2024-20719 |
Magento Open Source allows Cross-Site Scripting (XSS) Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored … |
Vulnerable |
|
GHSA-hqgj-4396-hmxv
Aliases: CVE-2024-20718 |
Magento Open Source allows Cross-Site Request Forgery (CSRF) Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a … |
Vulnerable |
|
GHSA-525f-pvj5-vqmq
Aliases: CVE-2024-20720 |
Magento Open Source allows OS Command Injection Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-jmqp-r3gg-6jh3
Aliases: CVE-2024-34111 |
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by … |
Vulnerable |
|
GHSA-wwj3-573j-rvvm
Aliases: CVE-2024-34104 |
Magento Open Source Improper Authorization vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-r7cm-g469-wm4g
Aliases: CVE-2024-34107 |
Magento Open Source Improper Access Control vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an … |
Vulnerable |
|
GHSA-m8cj-3v68-3cxj
Aliases: CVE-2024-34102 |
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, … |
Vulnerable |
|
GHSA-p6h9-gx5g-wg64
Aliases: CVE-2024-34106 |
Magento Open Source Incorrect Authorization vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Incorrect … |
Vulnerable |
|
GHSA-5632-wq7m-gfq9
Aliases: CVE-2024-34105 |
Magento Open Source Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a … |
Vulnerable |
|
GHSA-f7q4-9gwv-6774
Aliases: CVE-2024-34103 |
Magento Open Source Improper Authentication vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-3j7w-jp46-9752
Aliases: CVE-2023-38219 |
Magento Open Source allows Cross-Site Scripting (XSS) Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and … |
Vulnerable |
|
GHSA-7pfc-834q-h497
Aliases: CVE-2023-38251 |
Magento Open Source allows Uncontrolled Resource Consumption Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and … |
Vulnerable |
|
GHSA-rpc7-gf58-v3x2
Aliases: CVE-2023-38218 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 … |
Vulnerable |
|
GHSA-h3g9-cwr6-hphx
Aliases: CVE-2023-38250 |
Magento Open Source allows SQL Injection Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 … |
Vulnerable |
|
GHSA-8jxc-5f94-22vh
Aliases: CVE-2023-26366 |
Magento Open Source allows Server-Side Request Forgery (SSRF) Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) … |
Vulnerable |
|
GHSA-rq36-9f5f-2gw7
Aliases: CVE-2023-38249 |
Magento Open Source allows SQL Injection Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 … |
Vulnerable |
|
GHSA-grc6-r6f8-xj7c
Aliases: CVE-2023-38220 |
Magento Open Source allows Improper Authorization Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 … |
Vulnerable |
|
GHSA-9mx6-4gg4-85xj
Aliases: CVE-2023-26367 |
Magento Open Source has Improper Input Validation Vulnerability Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) … |
Vulnerable |
|
GHSA-ggr8-3hwx-4f2m
Aliases: CVE-2023-38221 |
Magento Open Source allows SQL Injection Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 … |
Vulnerable |
|
GHSA-4588-7x48-jrgj
Aliases: CVE-2023-29292 |
Magento Open Source allows Server-Side Request Forgery (SSRF) Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and … |
Vulnerable |
|
GHSA-354h-fpmq-68v7
Aliases: CVE-2023-29295 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are … |
Vulnerable |
|
GHSA-5f79-vhr4-vw2r
Aliases: CVE-2023-29291 |
Magento Open Source allows Server-Side Request Forgery (SSRF) Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and … |
Vulnerable |
|
GHSA-66c9-xrwj-9xv6
Aliases: CVE-2023-29293 |
Magento Open Source affected by Improper Input Validation Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and … |
Vulnerable |
|
GHSA-3qr4-w96f-672v
Aliases: CVE-2023-29296 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are … |
Vulnerable |
|
GHSA-f989-3fp9-q3r2
Aliases: CVE-2023-29288 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are … |
Vulnerable |
|
GHSA-28vp-39rf-3q2j
Aliases: CVE-2023-29294 |
Magento Open Source has Business Logic Errors Vulnerability Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and … |
Vulnerable |
|
GHSA-wh42-8r2w-873x
Aliases: CVE-2023-29289 |
Magento Open Source allows XML Injection Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are … |
Vulnerable |
|
GHSA-qw5m-vmp3-f553
Aliases: CVE-2023-29290 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are … |
Vulnerable |
|
GHSA-gfmm-ww6f-5mm5
Aliases: CVE-2023-29297 |
Magento Open Source allows Improper Neutralization of Special Elements Used Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and … |
Vulnerable |
|
GHSA-85m4-g9vq-xpxj
Aliases: CVE-2023-29287 |
Magento Open Source allows Information Exposure Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are … |
Vulnerable |
|
GHSA-fxcr-gvcw-hmqm
Aliases: CVE-2023-22249 |
Magento Open Source allows Cross-Site Scripting (XSS) Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by … | There are no reported fixed by versions. |
|
GHSA-3vg2-v639-6ch9
Aliases: CVE-2023-38209 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are … |
Vulnerable |
|
GHSA-mxc9-g6m4-2v35
Aliases: CVE-2023-38208 |
Magento Open Source allows Improper Neutralization of Special Elements Used Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and … |
Vulnerable |
|
GHSA-rpv2-g4pc-wp72
Aliases: CVE-2023-38207 |
Magento Open Source allows XML Injection Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are … |
Vulnerable |
|
GHSA-2wm7-mmgc-qxr3
Aliases: CVE-2023-22251 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an … |
Vulnerable |
|
GHSA-4h7p-4vq8-g2gh
Aliases: CVE-2023-22250 |
Magento Open Source allows Improper Access Control Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by … |
Vulnerable |
|
GHSA-2444-8gj8-6fmx
Aliases: CVE-2023-22247 |
Magento Open Source allows XML Injection Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an … |
Vulnerable |
|
CVE-2022-34254
|
Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Limitation of … |
Vulnerable Vulnerable |
|
CVE-2024-20758
Aliases: GHSA-wh4m-6rh3-p4rq |
Magento Open Source allows Improper Input Validation Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by an … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2024-20759
Aliases: GHSA-59vf-hjxc-f9c5 |
Magento Open Source allows Cross-Site Scripting (XSS) Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2022-34253
|
XML Injection (aka Blind XPath Injection) Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are … |
Vulnerable Vulnerable |
|
CVE-2022-34259
|
Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Access Control … |
Vulnerable Vulnerable |
|
CVE-2023-38207
Aliases: GHSA-rpv2-g4pc-wp72 |
Magento Open Source allows XML Injection Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2023-22250
Aliases: GHSA-4h7p-4vq8-g2gh |
Magento Open Source allows Improper Access Control Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by … |
Vulnerable Vulnerable |
|
CVE-2023-38209
Aliases: GHSA-3vg2-v639-6ch9 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2022-34258
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and … |
Vulnerable Vulnerable |
|
CVE-2023-22251
Aliases: GHSA-2wm7-mmgc-qxr3 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an … |
Vulnerable Vulnerable |
|
CVE-2023-38208
Aliases: GHSA-mxc9-g6m4-2v35 |
Magento Open Source allows Improper Neutralization of Special Elements Used Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and … |
Vulnerable Vulnerable Vulnerable |
|
CVE-2023-22248
Aliases: GHSA-5jfg-phx7-7fxg |
Magento Open Source affected by Improper Input Validation Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and … |
Vulnerable Vulnerable |
|
CVE-2022-34255
|
Incorrect Authorization Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper … |
Vulnerable Vulnerable |
|
CVE-2022-35689
Aliases: GHSA-5fxx-jwjm-x9hj |
Magento Open Source allows Improper Access Control Adobe Commerce versions 2.4.3-p3 (and earlier), 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) … |
Vulnerable |
|
CVE-2022-34256
|
Incorrect Authorization Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper … |
Vulnerable Vulnerable |
|
CVE-2023-22247
Aliases: GHSA-2444-8gj8-6fmx |
Magento Open Source allows XML Injection Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an … |
Vulnerable Vulnerable |
|
CVE-2022-34257
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and … |
Vulnerable Vulnerable |
|
GHSA-wh4m-6rh3-p4rq
Aliases: CVE-2024-20758 |
Magento Open Source allows Improper Input Validation Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by an … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-59vf-hjxc-f9c5
Aliases: CVE-2024-20759 |
Magento Open Source allows Cross-Site Scripting (XSS) Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a … |
Vulnerable Vulnerable Vulnerable |
|
GHSA-5jfg-phx7-7fxg
Aliases: CVE-2023-22248 |
Magento Open Source affected by Improper Input Validation Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and … |
Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-4f89-5cwm-rm5g
|
Magento Open Source Information Exposure vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an … |
CVE-2024-45134
|
|
GHSA-cg52-68fv-94qq
|
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
CVE-2024-45118
|
|
GHSA-v3v6-jfvw-m576
|
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
CVE-2024-45130
|
|
GHSA-w3p2-pc3h-69wv
|
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
CVE-2024-45124
|
|
GHSA-g9fm-wc6h-pvgj
|
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 (and earlier) are affected by … |
CVE-2024-45119
|
|
GHSA-w7rg-7wq2-pjrw
|
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
CVE-2024-45149
|
|
GHSA-873m-72g6-853g
|
Magento Open Source Cross-Site Scripting (XSS) vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
CVE-2024-45116
|
|
GHSA-2qhq-fw98-h6wg
|
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
CVE-2024-45121
|
|
GHSA-xc5p-773w-m3pm
|
Magento Open Source Improper Authorization vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an … |
CVE-2024-45131
|
|
GHSA-m58h-998x-66f3
|
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
CVE-2024-45129
|
|
GHSA-8pxg-gcp4-57ww
|
Magento Open Source Improper Access Control vulnerability Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an … |
CVE-2024-45135
|
|
GHSA-qpp7-742q-58j3
|
Magento Open Source Improper Authorization vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an … |
CVE-2024-45128
|
|
GHSA-47jp-46c9-25vf
|
Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected … |
CVE-2024-45120
|
|
GHSA-3fr3-gcqh-3m2g
|
Magento Open Source Improper Input Validation vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
CVE-2024-45117
|
|
GHSA-5f64-ppmg-cvvm
|
Magento Open Source Improper Authorization vulnerability Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper … |
CVE-2024-45132
|
|
GHSA-j3mh-wx5f-2vhg
|
Magento Open Source Information Exposure vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an … |
CVE-2024-45133
|
|
GHSA-xg36-8c2v-jpxh
|
Magento Open Source Incorrect Authorization vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an … |
CVE-2024-45125
|
|
GHSA-46fm-x82m-5f74
|
Magento Open Source Improper Access Control vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by … |
CVE-2024-45122
|
|
GHSA-88x2-cq34-5fwc
|
Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected … |
CVE-2024-45123
|
|
GHSA-c89g-gq5r-2xw2
|
Magento Open Source stored Cross-Site Scripting (XSS) vulnerability Magento Open Source versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected … |
CVE-2024-45127
|