Search for packages
| purl | pkg:composer/magento/project-community-edition@0.42.0-beta9 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-r355-75hw-r8jf
Aliases: CVE-2025-54265 |
Magento allows incorrect authorization Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization … | There are no reported fixed by versions. |
|
GHSA-qvwr-p3hj-j6jf
Aliases: CVE-2025-54267 |
Magento vulnerable to privilege escalation due to incorrect authorization Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are … | There are no reported fixed by versions. |
|
GHSA-2768-5wmv-cfff
Aliases: CVE-2025-54264 |
Magento vulnerable to stored Cross-Site Scripting (XSS) Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by … | There are no reported fixed by versions. |
|
GHSA-pcrx-r49h-x2w5
Aliases: CVE-2025-54266 |
Magento vulnerable to stored Cross-Site Scripting (XSS) Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by … | There are no reported fixed by versions. |
|
GHSA-69x9-xp2j-w8g8
Aliases: CVE-2025-54263 |
Magento provides incorrect authorization through a security feature bypass Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are … | There are no reported fixed by versions. |
|
GHSA-6wq7-cg9h-mj6q
Aliases: CVE-2025-27190 |
Magento Improper Access Control leads to Security feature bypass Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected … | There are no reported fixed by versions. |
|
GHSA-2r94-wm5v-4prx
Aliases: CVE-2025-27192 |
Magento does not properly protect credentials Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently … | There are no reported fixed by versions. |
|
GHSA-vhcq-4xrm-2cr2
Aliases: CVE-2025-27191 |
Magento Improper Access Control leads to Security feature bypass Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected … | There are no reported fixed by versions. |
|
GHSA-6ff8-jrfg-43hh
Aliases: CVE-2025-24425 |
Magento Business Logic Error vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Business … | There are no reported fixed by versions. |
|
GHSA-rjjw-g6hw-7pc9
Aliases: CVE-2025-24416 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … | There are no reported fixed by versions. |
|
GHSA-v6r2-425c-hfrr
Aliases: CVE-2025-24421 |
Magento Incorrect Authorization vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization … | There are no reported fixed by versions. |
|
GHSA-g3j6-9753-8mp2
Aliases: CVE-2025-24417 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … | There are no reported fixed by versions. |
|
GHSA-xwgx-8v72-4j5j
Aliases: CVE-2025-24413 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … | There are no reported fixed by versions. |
|
GHSA-3cfg-w257-cgf8
Aliases: CVE-2025-24408 |
Magento Information Exposure vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure … | There are no reported fixed by versions. |
|
GHSA-gjxp-46rq-wg4q
Aliases: CVE-2025-24410 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … | There are no reported fixed by versions. |
|
GHSA-469f-wf4f-3jjv
Aliases: CVE-2025-24437 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … | There are no reported fixed by versions. |
|
GHSA-vw47-79jv-3598
Aliases: CVE-2025-24409 |
Adobe Commerce Improper Authorization vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … | There are no reported fixed by versions. |
|
GHSA-gc27-rvvm-q77r
Aliases: CVE-2025-24415 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … | There are no reported fixed by versions. |
|
GHSA-82p4-55gj-956p
Aliases: CVE-2025-24435 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … | There are no reported fixed by versions. |
|
GHSA-8884-7rm9-mrx4
Aliases: CVE-2025-24438 |
Magento stored Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … | There are no reported fixed by versions. |
|
GHSA-7jmr-43qj-pw47
Aliases: CVE-2025-24432 |
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by … | There are no reported fixed by versions. |
|
GHSA-mm87-rrqx-94cr
Aliases: CVE-2025-24428 |
Magento stored Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … | There are no reported fixed by versions. |
|
GHSA-v3hq-g424-5mgg
Aliases: CVE-2025-24427 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … | There are no reported fixed by versions. |
|
GHSA-539v-w87w-w62c
Aliases: CVE-2025-24424 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … | There are no reported fixed by versions. |
|
GHSA-954p-ff72-327w
Aliases: CVE-2025-24406 |
Adobe Commerce Path Traversal Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation … | There are no reported fixed by versions. |
|
GHSA-36hw-x3cc-m258
Aliases: CVE-2025-24411 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … | There are no reported fixed by versions. |
|
GHSA-656q-fx2w-8ccv
Aliases: CVE-2025-24429 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … | There are no reported fixed by versions. |
|
GHSA-6w27-c66f-gvhq
Aliases: CVE-2025-24430 |
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by … | There are no reported fixed by versions. |
|
GHSA-fppq-f2m6-xv5c
Aliases: CVE-2025-24434 |
Improper Authorization vulnerability in Magento and Adobe Commerce Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected … | There are no reported fixed by versions. |
|
GHSA-fhw6-3mj5-w9gv
Aliases: CVE-2025-24414 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … | There are no reported fixed by versions. |
|
GHSA-m4rg-mpp2-97px
Aliases: CVE-2025-24412 |
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … | There are no reported fixed by versions. |
|
GHSA-ghpr-6qhr-rpp8
Aliases: CVE-2025-24436 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … | There are no reported fixed by versions. |
|
GHSA-g2pj-xmxq-3r9q
Aliases: CVE-2025-27206 |
Magento Improper Access Control leads to security feature bypass Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are … | There are no reported fixed by versions. |
|
GHSA-85jx-x9r4-45m2
Aliases: CVE-2025-49549 |
Magento Authenticated Security feature bypass Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization … | There are no reported fixed by versions. |
|
GHSA-r487-9vv5-75gg
Aliases: CVE-2025-43585 |
Magento Improper Authorization leading to security feature bypass Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by … | There are no reported fixed by versions. |
|
GHSA-8hcx-xvww-6c6h
Aliases: CVE-2025-49550 |
Magento Security feature bypass Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability … | There are no reported fixed by versions. |
|
GHSA-8mq8-c243-2335
Aliases: CVE-2025-49557 |
Magento Cross-site Scripting vulnerability Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored … | There are no reported fixed by versions. |
|
GHSA-5777-jj7p-mpqw
Aliases: CVE-2025-49555 |
Magento Cross-Site Request Forgery (CSRF) vulnerability Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a … | There are no reported fixed by versions. |
|
GHSA-wcmw-8xpp-rwfj
Aliases: CVE-2025-49558 |
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by … | There are no reported fixed by versions. |
|
GHSA-h4f4-gv6h-x824
Aliases: CVE-2025-49559 |
Magento vulnerable to path traversal Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper … | There are no reported fixed by versions. |
|
GHSA-7hrj-3c9x-xv5h
Aliases: CVE-2025-49556 |
Magento has incorrect authorization issue that leads to arbitrary file system read Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 … | There are no reported fixed by versions. |
|
GHSA-xgfm-992v-h2hr
Aliases: CVE-2025-49554 |
Magento vulnerable to denial of service Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an … | There are no reported fixed by versions. |
|
GHSA-wh92-6q6g-px7j
Aliases: CVE-2025-54236 |
Magento Community Edition Improper Input Validation vulnerability Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected … | There are no reported fixed by versions. |
|
GHSA-5fxx-jwjm-x9hj
Aliases: CVE-2022-35689 |
Magento Open Source allows Improper Access Control Adobe Commerce versions 2.4.3-p3 (and earlier), 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) … | There are no reported fixed by versions. |
|
GHSA-4vj2-426r-jm3g
Aliases: CVE-2022-35698 |
Magento Open Source allows Stored Cross-Site Scripting (Stored XSS) Adobe Commerce versions 2.4.3-p3 (and earlier), 2.4.4-p1 (and earlier) and 2.4.5 … | There are no reported fixed by versions. |
|
GHSA-hvf5-4jr9-fghh
Aliases: CVE-2020-24402 |
Magento incorrect permissions vulnerability in the Integrations component Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect … | There are no reported fixed by versions. |
|
GHSA-55gv-hfg3-hwjq
Aliases: CVE-2020-9585 |
Magento Defense-in-depth security mitigation vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … | There are no reported fixed by versions. |
|
GHSA-8wm7-h2qh-ff4c
Aliases: CVE-2020-9587 |
Magento authorization bypass vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … | There are no reported fixed by versions. |
|
GHSA-j2r4-2cr6-h3r3
Aliases: CVE-2020-9588 |
Magento Signature verification bypass Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … | There are no reported fixed by versions. |
|
GHSA-j2jp-58gv-g2pg
Aliases: CVE-2020-9580 |
Magento Security mitigation bypass vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … | There are no reported fixed by versions. |
|
GHSA-7pxg-6p87-8c9v
Aliases: CVE-2020-24407 |
Magento 2 Community Edition RCE via Unsafe File Upload Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an … | There are no reported fixed by versions. |
|
GHSA-94wq-87g6-8h77
Aliases: CVE-2021-39864 |
Magento Open Source allows Cross-Site Request Forgery (CSRF) Adobe Commerce versions 2.4.2-p2 (and earlier), 2.4.3 (and earlier) and 2.3.7p1 (and … | There are no reported fixed by versions. |
|
GHSA-6w29-x5j4-qhrw
Aliases: CVE-2020-9632 |
Magento security mitigation bypass vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … | There are no reported fixed by versions. |
|
GHSA-36xq-7w8w-xp68
Aliases: CVE-2021-36043 |
Magento affected by a blind SSRF vulnerability in the bundled dotmailer extension Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and … | There are no reported fixed by versions. |
|
GHSA-h4xc-577p-hgj9
Aliases: CVE-2021-21027 |
Magento cross-site request forgery (CSRF) vulnerability via the GraphQL API Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 … | There are no reported fixed by versions. |
|
GHSA-2w2x-7qgj-4x78
Aliases: CVE-2020-9581 |
Magento stored cross-site scripting vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … | There are no reported fixed by versions. |
|
GHSA-6988-g89m-27vf
Aliases: CVE-2021-21030 |
Magento stored cross-site scripting (XSS) in the customer address upload feature Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and … | There are no reported fixed by versions. |
|
GHSA-689w-2f93-2x67
Aliases: CVE-2020-9577 |
Magento stored cross-site scripting vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … | There are no reported fixed by versions. |
|
GHSA-7gh6-f4jh-3crq
Aliases: CVE-2021-28583 |
Magento Violation of Secure Design Principles vulnerability in RMA PDF filename formats Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) … | There are no reported fixed by versions. |
|
GHSA-8gfq-m4cf-w975
Aliases: CVE-2021-36026 |
Magento stored cross-site scripting vulnerability in the customer address upload feature Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) … | There are no reported fixed by versions. |
|
GHSA-c3m4-hxv9-4mxj
Aliases: CVE-2020-9582 |
Magento command injection vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … | There are no reported fixed by versions. |
|
GHSA-724x-gqhv-9c5x
Aliases: CVE-2020-9578 |
Magento command injection vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … | There are no reported fixed by versions. |
|
GHSA-cc3w-r3w8-hfh7
Aliases: CVE-2021-28567 |
Magento Improper Authorization vulnerability in the customers module Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) … | There are no reported fixed by versions. |
|
GHSA-4f7x-gjqc-qqpg
Aliases: CVE-2020-9576 |
Magento command injection vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … | There are no reported fixed by versions. |
|
GHSA-3g7m-g8qm-x6j5
Aliases: CVE-2021-36039 |
Magento discloses sensitive information Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by … | There are no reported fixed by versions. |
|
GHSA-2j6v-829g-885q
Aliases: CVE-2021-21020 |
Magento Improper Access Control Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an … | There are no reported fixed by versions. |
|
GHSA-wgpr-9675-8r67
Aliases: CVE-2021-36038 |
Magento discloses sensitive information via the Multishipping Module Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and … | There are no reported fixed by versions. |
|
GHSA-45h4-6gcj-6hwv
Aliases: CVE-2020-9584 |
Magento Stored cross-site scripting Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … | There are no reported fixed by versions. |
|
GHSA-x2v2-2jhp-c5hv
Aliases: CVE-2021-36027 |
Magento stored cross-site scripting vulnerability Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected … | There are no reported fixed by versions. |
|
GHSA-3f97-7pgv-gmgr
Aliases: CVE-2021-36012 |
Magento affected by a business logic error in the placeOrder graphql mutation Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and … | There are no reported fixed by versions. |
|
GHSA-3x9x-vhqj-cv27
Aliases: CVE-2021-36022 |
Magento XML Injection vulnerability in the Widgets Update Layout Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 … | There are no reported fixed by versions. |
|
GHSA-7gpv-xrjr-f5h4
Aliases: CVE-2021-28584 |
Magento Path Traversal vulnerability Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a … | There are no reported fixed by versions. |
|
GHSA-j46h-qjjv-cxfj
Aliases: CVE-2021-36034 |
Magento affected by remote code execution via a file upload Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and … | There are no reported fixed by versions. |
|
GHSA-c38m-9668-6j2w
Aliases: CVE-2021-28585 |
Magento Improper input validation vulnerability Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by … | There are no reported fixed by versions. |
|
GHSA-qmq6-jpvg-j547
Aliases: CVE-2021-36024 |
Magento is affected by an os command injection via the Data collection endpoint Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 … | There are no reported fixed by versions. |
|
GHSA-792f-c8mp-2cr5
Aliases: CVE-2021-21016 |
Magento OS command injection via the WebAPI Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are … | There are no reported fixed by versions. |
|
GHSA-gffx-9f36-r8wp
Aliases: CVE-2020-9631 |
Magento security mitigation bypass vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … | There are no reported fixed by versions. |
|
GHSA-crjc-2v9m-8w7r
Aliases: CVE-2021-21026 |
Magento improper authorization vulnerability in the integrations module Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) … | There are no reported fixed by versions. |
|
GHSA-39rw-4m66-82gf
Aliases: CVE-2020-24403 |
Magento incorrect user permissions vulnerability within the Inventory component Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an … | There are no reported fixed by versions. |
|
GHSA-5vw8-r55w-f4q4
Aliases: CVE-2021-36032 |
Magento is affected by an improper input validation vulnerability Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 … | There are no reported fixed by versions. |
|
GHSA-4jfq-f8hc-775q
Aliases: CVE-2021-21032 |
Magento Insufficient Session Expiration Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate … | There are no reported fixed by versions. |
|
GHSA-39ch-rg26-gmq5
Aliases: CVE-2021-28556 |
Magento DOM-based Cross-Site Scripting vulnerability on mage-messages cookies Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) … | There are no reported fixed by versions. |
|
GHSA-wr57-3h2f-3q95
Aliases: CVE-2021-36044 |
Magento affected by a server-side denial-of-service using a GraphQL field Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and … | There are no reported fixed by versions. |
|
GHSA-xvpx-6hh8-7h72
Aliases: CVE-2021-36020 |
Magento XML Injection vulnerability in the 'City' field Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and … | There are no reported fixed by versions. |
|
GHSA-rhff-65hp-55rw
Aliases: CVE-2021-36030 |
Magento allows attackers to alter the price of items Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 … | There are no reported fixed by versions. |
|
GHSA-mx5m-j5xr-jg8c
Aliases: CVE-2021-36041 |
Magento vulnerable to file upload attack Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are … | There are no reported fixed by versions. |
|
GHSA-m8wx-whpp-q283
Aliases: CVE-2021-36029 |
Magento improper authorization vulnerability Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by … | There are no reported fixed by versions. |
|
GHSA-g7pc-799q-743f
Aliases: CVE-2020-9691 |
Magento DOM-based Cross-site scripting vulnerability Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a dom-based cross-site scripting vulnerability. … | There are no reported fixed by versions. |
|
GHSA-f2g3-3c6q-4478
Aliases: CVE-2020-24401 |
Magento 2 Community Edition Incorrect Authorization Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect authorization vulnerability. … | There are no reported fixed by versions. |
|
GHSA-c55h-7q4j-g6rq
Aliases: CVE-2020-9583 |
Magento command injection vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and … | There are no reported fixed by versions. |
|
GHSA-2pq5-gpqf-g4r3
Aliases: CVE-2021-36040 |
Magento has a file extension restrictions bypass Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) … | There are no reported fixed by versions. |
|
GHSA-h5rm-m772-6qcx
Aliases: CVE-2021-21023 |
Magento stored cross-site scripting vulnerability in the admin console Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and … | There are no reported fixed by versions. |
|
GHSA-gvfx-9m9v-h839
Aliases: CVE-2021-36025 |
Magento is affected by an improper input validation vulnerability while saving a customer's details Magento Commerce versions 2.4.2 (and earlier), … | There are no reported fixed by versions. |
|
GHSA-5j4w-v87m-8r65
Aliases: CVE-2020-9630 |
Magento business logic error vulnerability Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 … | There are no reported fixed by versions. |
|
GHSA-vrq2-w7r7-3fp2
Aliases: CVE-2021-36037 |
Magento is affected by an improper authorization vulnerability Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and … | There are no reported fixed by versions. |
|
GHSA-8pfq-g48p-x7w8
Aliases: CVE-2021-21022 |
Magento Insecure Direct Object Reference (IDOR) in the product module Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 … | There are no reported fixed by versions. |
|
GHSA-crv7-r357-gw3w
Aliases: CVE-2019-8114 |
Magento 2 Community Edition RCE Vulnerability A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, … | There are no reported fixed by versions. |
|
GHSA-6cwv-wj7v-73xp
Aliases: CVE-2021-36042 |
Magento executes code via the API File Option Upload Extension Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and … | There are no reported fixed by versions. |
|
GHSA-p746-qw73-qmmx
Aliases: CVE-2021-36033 |
Magento XML Injection vulnerability in the Widgets Module Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and … | There are no reported fixed by versions. |
|
GHSA-269w-pqc7-68q9
Aliases: CVE-2021-21014 |
Magento vulnerable to a file upload restriction bypass Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) … | There are no reported fixed by versions. |
|
GHSA-h437-qjj9-vmq4
Aliases: CVE-2021-21025 |
Magento XPath Injection Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection … | There are no reported fixed by versions. |
|
GHSA-4h3p-63x6-vwg2
Aliases: CVE-2021-21031 |
Magento Insufficient Session Expiration Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate … | There are no reported fixed by versions. |
|
GHSA-5pjj-7fq8-9gpf
Aliases: CVE-2021-36028 |
Magento has an XML Injection vulnerability Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are … | There are no reported fixed by versions. |
|
GHSA-fr6f-xmfx-rrpq
Aliases: CVE-2020-9689 |
Magento path traversal vulnerability Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability. Successful exploitation … | There are no reported fixed by versions. |
|
GHSA-7w95-qwhh-q9p3
Aliases: CVE-2021-36031 |
Magento Path Traversal vulnerability via the `theme[preview_image]` parameter Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and … | There are no reported fixed by versions. |
|
GHSA-gm4m-9rm8-7rxj
Aliases: CVE-2022-35692 |
Magento Open Source has Improper Access Control vulnerability Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and … | There are no reported fixed by versions. |
|
GHSA-c9h9-h5gf-885r
Aliases: CVE-2024-20716 |
Magento Open Source allows Uncontrolled Resource Consumption Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled … | There are no reported fixed by versions. |
|
GHSA-264g-f7v8-q5qq
Aliases: CVE-2024-20719 |
Magento Open Source allows Cross-Site Scripting (XSS) Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored … | There are no reported fixed by versions. |
|
GHSA-hqgj-4396-hmxv
Aliases: CVE-2024-20718 |
Magento Open Source allows Cross-Site Request Forgery (CSRF) Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a … | There are no reported fixed by versions. |
|
GHSA-525f-pvj5-vqmq
Aliases: CVE-2024-20720 |
Magento Open Source allows OS Command Injection Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Improper … | There are no reported fixed by versions. |
|
GHSA-52fg-wjxm-pp44
Aliases: CVE-2024-39400 |
Magento DOM-based Cross-Site Scripting (XSS) vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a DOM-based Cross-Site … | There are no reported fixed by versions. |
|
GHSA-74w7-cr4v-wf2v
Aliases: CVE-2024-39419 |
Magento Improper Access Control Leads to Privilege escalation Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by … | There are no reported fixed by versions. |
|
GHSA-7r99-8wqp-h7pc
Aliases: CVE-2024-39399 |
Magento Path Traversal vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a … | There are no reported fixed by versions. |
|
GHSA-5g9f-7gqc-8hj4
Aliases: CVE-2024-39405 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … | There are no reported fixed by versions. |
|
GHSA-8frp-pxq2-3gpq
Aliases: CVE-2024-39401 |
Magento OS Command ('OS Command Injection') vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper … | There are no reported fixed by versions. |
|
GHSA-4xmj-f664-hv98
Aliases: CVE-2024-39417 |
Magento Improper Authorization leads to Security feature bypass Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … | There are no reported fixed by versions. |
|
GHSA-cjm6-8mw8-2f8c
Aliases: CVE-2024-39407 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … | There are no reported fixed by versions. |
|
GHSA-qm77-mqf3-fmhq
Aliases: CVE-2024-39411 |
Magento Improper Authorization leads to security feature bypass Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … | There are no reported fixed by versions. |
|
GHSA-8w5f-8992-g86j
Aliases: CVE-2024-39413 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … | There are no reported fixed by versions. |
|
GHSA-mmp7-8cg4-9wrg
Aliases: CVE-2024-39403 |
Magento Stored Cross-Site Scripting (XSS) vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a stored Cross-Site … | There are no reported fixed by versions. |
|
GHSA-gj93-84g5-mcjq
Aliases: CVE-2024-39415 |
Magento Improper Authorization Leading to Security feature bypass Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … | There are no reported fixed by versions. |
|
GHSA-2ff6-837j-hg5x
Aliases: CVE-2024-39402 |
Magento OS Command ('OS Command Injection') vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper … | There are no reported fixed by versions. |
|
GHSA-q628-54wg-4r5q
Aliases: CVE-2024-39398 |
Magento does not properly restrict excessive authentication attempts Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … | There are no reported fixed by versions. |
|
GHSA-4xgg-rw35-7mv5
Aliases: CVE-2024-39416 |
Magento Improper Authorization leads to Security feature bypass Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … | There are no reported fixed by versions. |
|
GHSA-gvgf-pvh5-vjh4
Aliases: CVE-2024-39418 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … | There are no reported fixed by versions. |
|
GHSA-x6f9-hv9r-fgq4
Aliases: CVE-2024-39414 |
Magento Improper Access Control Leads to Privilege escalation Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … | There are no reported fixed by versions. |
|
GHSA-qrh3-vxjg-h9h6
Aliases: CVE-2024-39404 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … | There are no reported fixed by versions. |
|
GHSA-3j7w-jp46-9752
Aliases: CVE-2023-38219 |
Magento Open Source allows Cross-Site Scripting (XSS) Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and … | There are no reported fixed by versions. |
|
GHSA-7pfc-834q-h497
Aliases: CVE-2023-38251 |
Magento Open Source allows Uncontrolled Resource Consumption Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and … | There are no reported fixed by versions. |
|
GHSA-rpc7-gf58-v3x2
Aliases: CVE-2023-38218 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 … | There are no reported fixed by versions. |
|
GHSA-h3g9-cwr6-hphx
Aliases: CVE-2023-38250 |
Magento Open Source allows SQL Injection Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 … | There are no reported fixed by versions. |
|
GHSA-8jxc-5f94-22vh
Aliases: CVE-2023-26366 |
Magento Open Source allows Server-Side Request Forgery (SSRF) Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) … | There are no reported fixed by versions. |
|
GHSA-rq36-9f5f-2gw7
Aliases: CVE-2023-38249 |
Magento Open Source allows SQL Injection Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 … | There are no reported fixed by versions. |
|
GHSA-grc6-r6f8-xj7c
Aliases: CVE-2023-38220 |
Magento Open Source allows Improper Authorization Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 … | There are no reported fixed by versions. |
|
GHSA-9mx6-4gg4-85xj
Aliases: CVE-2023-26367 |
Magento Open Source has Improper Input Validation Vulnerability Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) … | There are no reported fixed by versions. |
|
GHSA-ggr8-3hwx-4f2m
Aliases: CVE-2023-38221 |
Magento Open Source allows SQL Injection Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 … | There are no reported fixed by versions. |
|
GHSA-4588-7x48-jrgj
Aliases: CVE-2023-29292 |
Magento Open Source allows Server-Side Request Forgery (SSRF) Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and … | There are no reported fixed by versions. |
|
GHSA-354h-fpmq-68v7
Aliases: CVE-2023-29295 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are … | There are no reported fixed by versions. |
|
GHSA-5f79-vhr4-vw2r
Aliases: CVE-2023-29291 |
Magento Open Source allows Server-Side Request Forgery (SSRF) Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and … | There are no reported fixed by versions. |
|
GHSA-66c9-xrwj-9xv6
Aliases: CVE-2023-29293 |
Magento Open Source affected by Improper Input Validation Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and … | There are no reported fixed by versions. |
|
GHSA-3qr4-w96f-672v
Aliases: CVE-2023-29296 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are … | There are no reported fixed by versions. |
|
GHSA-f989-3fp9-q3r2
Aliases: CVE-2023-29288 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are … | There are no reported fixed by versions. |
|
GHSA-28vp-39rf-3q2j
Aliases: CVE-2023-29294 |
Magento Open Source has Business Logic Errors Vulnerability Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and … | There are no reported fixed by versions. |
|
GHSA-wh42-8r2w-873x
Aliases: CVE-2023-29289 |
Magento Open Source allows XML Injection Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are … | There are no reported fixed by versions. |
|
GHSA-qw5m-vmp3-f553
Aliases: CVE-2023-29290 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are … | There are no reported fixed by versions. |
|
GHSA-gfmm-ww6f-5mm5
Aliases: CVE-2023-29297 |
Magento Open Source allows Improper Neutralization of Special Elements Used Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and … | There are no reported fixed by versions. |
|
GHSA-85m4-g9vq-xpxj
Aliases: CVE-2023-29287 |
Magento Open Source allows Information Exposure Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are … | There are no reported fixed by versions. |
|
GHSA-3vg2-v639-6ch9
Aliases: CVE-2023-38209 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are … | There are no reported fixed by versions. |
|
GHSA-mxc9-g6m4-2v35
Aliases: CVE-2023-38208 |
Magento Open Source allows Improper Neutralization of Special Elements Used Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and … | There are no reported fixed by versions. |
|
GHSA-rpv2-g4pc-wp72
Aliases: CVE-2023-38207 |
Magento Open Source allows XML Injection Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are … | There are no reported fixed by versions. |
|
GHSA-2wm7-mmgc-qxr3
Aliases: CVE-2023-22251 |
Magento Open Source allows Incorrect Authorization Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an … | There are no reported fixed by versions. |
|
GHSA-4h7p-4vq8-g2gh
Aliases: CVE-2023-22250 |
Magento Open Source allows Improper Access Control Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by … | There are no reported fixed by versions. |
|
GHSA-2444-8gj8-6fmx
Aliases: CVE-2023-22247 |
Magento Open Source allows XML Injection Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an … | There are no reported fixed by versions. |
|
GHSA-4g27-q2w9-m8m8
Aliases: CVE-2021-36021 |
Magento affected by remote code execution vulnerability in the CMS page scheduled update feature Magento versions 2.4.2 (and earlier), 2.4.2-p1 … | There are no reported fixed by versions. |
|
GHSA-wqr6-wv6c-p8fx
Aliases: CVE-2021-36036 |
Magento improper access control vulnerability within Magento's Media Gallery Upload workflow Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and … | There are no reported fixed by versions. |
|
GHSA-8cjg-f53m-8m9q
Aliases: CVE-2021-36023 |
Magento XML Injection vulnerability in the Widgets Update Layout Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 … | There are no reported fixed by versions. |
|
GHSA-5xmp-7wg5-x68q
Aliases: CVE-2022-24093 |
Magento Open Source affected by Improper Input Validation Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected … | There are no reported fixed by versions. |
|
GHSA-wh4m-6rh3-p4rq
Aliases: CVE-2024-20758 |
Magento Open Source allows Improper Input Validation Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by an … | There are no reported fixed by versions. |
|
GHSA-59vf-hjxc-f9c5
Aliases: CVE-2024-20759 |
Magento Open Source allows Cross-Site Scripting (XSS) Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a … | There are no reported fixed by versions. |
|
GHSA-5jfg-phx7-7fxg
Aliases: CVE-2023-22248 |
Magento Open Source affected by Improper Input Validation Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and … | There are no reported fixed by versions. |