CVE Daily – Magento (High+Critical) https://cvedaily.com/pages/tags/magento.html CVE Daily – Magento (High+Critical) en Wed, 03 Jun 2026 21:26:43 +0000 [Critical] CVE-2026-45247 – Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a ... https://nvd.nist.gov/vuln/detail/CVE-2026-45247 https://nvd.nist.gov/vuln/detail/CVE-2026-45247 Tue, 26 May 2026 15:16:39 +0000 Critical CVE-2026-45247

Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP's native unserialize() function combined with gadget chains available in Magento and its d…

CVSS: 9.8 · CWE: CWE-502

View on NVD

]]> [Critical] CVE-2026-42155 – Magento Long Term Support (LTS) is an unofficial, community-driven project provi... https://nvd.nist.gov/vuln/detail/CVE-2026-42155 https://nvd.nist.gov/vuln/detail/CVE-2026-42155 Fri, 15 May 2026 17:16:46 +0000 Critical CVE-2026-42155

Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, the XML-RPC / SOAP API session ID is generated using an outdated, time-based construction rather than a Cryptographically Secure Pseudo-Random Number Generator (CSPRNG). All inputs to…

CVSS: 9.3 · CWE: CWE-330

View on NVD

]]> [High] CVE-2026-40488 – Magento Long Term Support (LTS) is an unofficial, community-driven project provi... https://nvd.nist.gov/vuln/detail/CVE-2026-40488 https://nvd.nist.gov/vuln/detail/CVE-2026-40488 Mon, 20 Apr 2026 17:16:36 +0000 High CVE-2026-40488

Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to version 20.17.0, the product custom option file upload in OpenMage LTS uses an incomplete blocklist (`forbidden_extensions = php,exe`) to prevent dangerous file uploads. This blocklist can be t…

CVSS: 8.8 · CWE: CWE-434

View on NVD

]]> [High] CVE-2026-25524 – Magento Long Term Support (LTS) is an unofficial, community-driven project provi... https://nvd.nist.gov/vuln/detail/CVE-2026-25524 https://nvd.nist.gov/vuln/detail/CVE-2026-25524 Mon, 20 Apr 2026 17:16:32 +0000 High CVE-2026-25524

Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to version 20.17.0, PHP functions such as `getimagesize()`, `file_exists()`, and `is_readable()` can trigger deserialization when processing `phar://` stream wrapper paths. OpenMage LTS uses these…

CVSS: 8.1 · CWE: CWE-502

View on NVD

]]> [High] CVE-2025-60991 – A reflected cross-site scripted (XSS) vulnerability in Codazon Magento Themes v1... https://nvd.nist.gov/vuln/detail/CVE-2025-60991 https://nvd.nist.gov/vuln/detail/CVE-2025-60991 Wed, 01 Oct 2025 18:15:46 +0000 High CVE-2025-60991

A reflected cross-site scripted (XSS) vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload injected into the cat parameter.

CVSS: 8.8 · CWE: CWE-79

View on NVD

]]> [High] CVE-2023-41879 – Magento LTS is the official OpenMage LTS codebase. Guest orders may be viewed wi... https://nvd.nist.gov/vuln/detail/CVE-2023-41879 https://nvd.nist.gov/vuln/detail/CVE-2023-41879 Mon, 11 Sep 2023 22:15:08 +0000 High CVE-2023-41879

Magento LTS is the official OpenMage LTS codebase. Guest orders may be viewed without authentication using a "guest-view" cookie which contains the order's "protect_code". This code is 6 hexadecimal characters which is arguably not enough to prevent a brute-force attack. Exposing each order would require a separate brute force attack. This issue has been patched in versions 19.5.1 and 20.1.1.

CVSS: 7.5 · CWE: CWE-330

View on NVD

]]> [High] CVE-2021-36036 – Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earl... https://nvd.nist.gov/vuln/detail/CVE-2021-36036 https://nvd.nist.gov/vuln/detail/CVE-2021-36036 Wed, 06 Sep 2023 14:15:09 +0000 High CVE-2021-36036

Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper access control vulnerability within Magento's Media Gallery Upload workflow. By storing a specially crafted file in the website gallery, an authenticated attacker with administrative privilege can gain access to delete the .htaccess file. This could result in the attacker achieving rem…

CVSS: 7.2 · CWE: CWE-284

View on NVD

]]> [Critical] CVE-2021-36023 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36023 https://nvd.nist.gov/vuln/detail/CVE-2021-36023 Wed, 06 Sep 2023 14:15:08 +0000 Critical CVE-2021-36023

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.

CVSS: 9.1 · CWE: CWE-78

View on NVD

]]> [High] CVE-2021-36021 – Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earl... https://nvd.nist.gov/vuln/detail/CVE-2021-36021 https://nvd.nist.gov/vuln/detail/CVE-2021-36021 Wed, 06 Sep 2023 14:15:08 +0000 High CVE-2021-36021

Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper input validation vulnerability within the CMS page scheduled update feature. An authenticated attacker with administrative privilege could leverage this vulnerability to achieve remote code execution on the system.

CVSS: 7.2 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2021-33353 – Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3... https://nvd.nist.gov/vuln/detail/CVE-2021-33353 https://nvd.nist.gov/vuln/detail/CVE-2021-33353 Wed, 08 Mar 2023 22:15:09 +0000 Critical CVE-2021-33353

Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via the file attachment directory setting.

CVSS: 9.8 · CWE: CWE-22

View on NVD

]]> [Critical] CVE-2021-33352 – An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v... https://nvd.nist.gov/vuln/detail/CVE-2021-33352 https://nvd.nist.gov/vuln/detail/CVE-2021-33352 Wed, 08 Mar 2023 22:15:09 +0000 Critical CVE-2021-33352

An issue in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary code via a phar file upload in the ticket message field.

CVSS: 9.8 · CWE: CWE-434

View on NVD

]]> [Critical] CVE-2021-33351 – Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1... https://nvd.nist.gov/vuln/detail/CVE-2021-33351 https://nvd.nist.gov/vuln/detail/CVE-2021-33351 Wed, 08 Mar 2023 22:15:09 +0000 Critical CVE-2021-33351

Cross Site Scripting Vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before and fixed in v.1.3.7 allows attackers to escalte privileges via a crafted payload in the ticket message field.

CVSS: 9.0 · CWE: CWE-79

View on NVD

]]> [High] CVE-2021-41143 – OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, M... https://nvd.nist.gov/vuln/detail/CVE-2021-41143 https://nvd.nist.gov/vuln/detail/CVE-2021-41143 Fri, 27 Jan 2023 19:15:09 +0000 High CVE-2021-41143

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Magento admin users with access to the customer media could execute code on the server. Versions 19.4.22 and 20.0.19 contain a patch for this issue.

CVSS: 7.2 · CWE: CWE-77

View on NVD

]]> [High] CVE-2021-36044 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36044 https://nvd.nist.gov/vuln/detail/CVE-2021-36044 Wed, 01 Sep 2021 15:15:10 +0000 High CVE-2021-36044

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An unauthenticated attacker could abuse this vulnerability to cause a server-side denial-of-service using a GraphQL field.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2021-36043 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36043 https://nvd.nist.gov/vuln/detail/CVE-2021-36043 Wed, 01 Sep 2021 15:15:10 +0000 High CVE-2021-36043

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a blind SSRF vulnerability in the bundled dotmailer extension. An attacker with admin privileges could abuse this to achieve remote code execution should Redis be enabled.

CVSS: 8.0 · CWE: CWE-918

View on NVD

]]> [Critical] CVE-2021-36042 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36042 https://nvd.nist.gov/vuln/detail/CVE-2021-36042 Wed, 01 Sep 2021 15:15:10 +0000 Critical CVE-2021-36042

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the API File Option Upload Extension. An attacker with Admin privileges can achieve unrestricted file upload which can result in remote code execution.

CVSS: 9.1 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2021-36041 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36041 https://nvd.nist.gov/vuln/detail/CVE-2021-36041 Wed, 01 Sep 2021 15:15:10 +0000 Critical CVE-2021-36041

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges could upload a specially crafted file in the 'pub/media` directory could lead to remote code execution.

CVSS: 9.1 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2021-36040 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36040 https://nvd.nist.gov/vuln/detail/CVE-2021-36040 Wed, 01 Sep 2021 15:15:10 +0000 Critical CVE-2021-36040

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to bypass file extension restrictions and could lead to remote code execution.

CVSS: 9.1 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2021-36035 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36035 https://nvd.nist.gov/vuln/detail/CVE-2021-36035 Wed, 01 Sep 2021 15:15:09 +0000 Critical CVE-2021-36035

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges could make a crafted request to the Adobe Stock API to achieve remote code execution.

CVSS: 9.1 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2021-36034 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36034 https://nvd.nist.gov/vuln/detail/CVE-2021-36034 Wed, 01 Sep 2021 15:15:09 +0000 Critical CVE-2021-36034

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An attacker with admin privileges can upload a specially crafted file to achieve remote code execution.

CVSS: 9.1 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2021-36033 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36033 https://nvd.nist.gov/vuln/detail/CVE-2021-36033 Wed, 01 Sep 2021 15:15:09 +0000 Critical CVE-2021-36033

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.

CVSS: 9.1 · CWE: CWE-91

View on NVD

]]> [High] CVE-2021-36032 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36032 https://nvd.nist.gov/vuln/detail/CVE-2021-36032 Wed, 01 Sep 2021 15:15:09 +0000 High CVE-2021-36032

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability. An authenticated attacker can trigger an insecure direct object reference in the `V1/customers/me` endpoint to achieve information exposure and privilege escalation.

CVSS: 8.3 · CWE: CWE-20

View on NVD

]]> [High] CVE-2021-36031 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36031 https://nvd.nist.gov/vuln/detail/CVE-2021-36031 Wed, 01 Sep 2021 15:15:09 +0000 High CVE-2021-36031

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a Path Traversal vulnerability via the `theme[preview_image]` parameter. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution.

CVSS: 7.2 · CWE: CWE-22

View on NVD

]]> [High] CVE-2021-36030 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36030 https://nvd.nist.gov/vuln/detail/CVE-2021-36030 Wed, 01 Sep 2021 15:15:09 +0000 High CVE-2021-36030

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter the price of items.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2021-36029 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36029 https://nvd.nist.gov/vuln/detail/CVE-2021-36029 Wed, 01 Sep 2021 15:15:09 +0000 Critical CVE-2021-36029

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization vulnerability. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution.

CVSS: 9.1 · CWE: CWE-285

View on NVD

]]> [Critical] CVE-2021-36028 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36028 https://nvd.nist.gov/vuln/detail/CVE-2021-36028 Wed, 01 Sep 2021 15:15:09 +0000 Critical CVE-2021-36028

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability when saving a configurable product. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.

CVSS: 9.1 · CWE: CWE-91

View on NVD

]]> [Critical] CVE-2021-36025 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36025 https://nvd.nist.gov/vuln/detail/CVE-2021-36025 Wed, 01 Sep 2021 15:15:09 +0000 Critical CVE-2021-36025

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability while saving a customer's details with a specially crafted file. An authenticated attacker with admin privileges can leverage this vulnerability to achieve remote code execution.

CVSS: 9.1 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2021-36024 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36024 https://nvd.nist.gov/vuln/detail/CVE-2021-36024 Wed, 01 Sep 2021 15:15:09 +0000 Critical CVE-2021-36024

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper Neutralization of Special Elements Used In A Command via the Data collection endpoint. An attacker with admin privileges can upload a specially crafted file to achieve remote code execution.

CVSS: 9.1 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2021-36022 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36022 https://nvd.nist.gov/vuln/detail/CVE-2021-36022 Wed, 01 Sep 2021 15:15:09 +0000 Critical CVE-2021-36022

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.

CVSS: 9.1 · CWE: CWE-78

View on NVD

]]> [High] CVE-2021-36020 – Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 ... https://nvd.nist.gov/vuln/detail/CVE-2021-36020 https://nvd.nist.gov/vuln/detail/CVE-2021-36020 Wed, 01 Sep 2021 15:15:09 +0000 High CVE-2021-36020

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the 'City' field. An unauthenticated attacker can trigger a specially crafted script to achieve remote code execution.

CVSS: 8.2 · CWE: CWE-91

View on NVD

]]> [High] CVE-2021-32759 – OpenMage magento-lts is an alternative to the Magento CE official releases. Due ... https://nvd.nist.gov/vuln/detail/CVE-2021-32759 https://nvd.nist.gov/vuln/detail/CVE-2021-32759 Fri, 27 Aug 2021 22:15:07 +0000 High CVE-2021-32759

OpenMage magento-lts is an alternative to the Magento CE official releases. Due to missing sanitation in data flow in versions prior to 19.4.15 and 20.0.13, it was possible for admin users to upload arbitrary executable files to the server. OpenMage versions 19.4.15 and 20.0.13 have a patch for this Issue.

CVSS: 7.2 · CWE: CWE-20

View on NVD

]]> [High] CVE-2021-32758 – OpenMage Magento LTS is an alternative to the Magento CE official releases. Prio... https://nvd.nist.gov/vuln/detail/CVE-2021-32758 https://nvd.nist.gov/vuln/detail/CVE-2021-32758 Fri, 27 Aug 2021 18:15:07 +0000 High CVE-2021-32758

OpenMage Magento LTS is an alternative to the Magento CE official releases. Prior to versions 19.4.15 and 20.0.11, layout XML enabled admin users to execute arbitrary commands via block methods. The latest OpenMage Versions up from v19.4.15 and v20.0.11 have this Issue patched.

CVSS: 7.2 · CWE: CWE-91

View on NVD

]]> [High] CVE-2021-28583 – Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and e... https://nvd.nist.gov/vuln/detail/CVE-2021-28583 https://nvd.nist.gov/vuln/detail/CVE-2021-28583 Mon, 28 Jun 2021 14:15:11 +0000 High CVE-2021-28583

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Violation of Secure Design Principles vulnerability in RMA PDF filename formats. Successful exploitation could allow an attacker to get unauthorized access to restricted resources.

CVSS: 7.5 · CWE: CWE-657

View on NVD

]]> [Critical] CVE-2021-21427 – Magento-lts is a long-term support alternative to Magento Community Edition (CE)... https://nvd.nist.gov/vuln/detail/CVE-2021-21427 https://nvd.nist.gov/vuln/detail/CVE-2021-21427 Wed, 21 Apr 2021 21:15:08 +0000 Critical CVE-2021-21427

Magento-lts is a long-term support alternative to Magento Community Edition (CE). A vulnerability in magento-lts versions before 19.4.13 and 20.0.9 potentially allows an administrator unauthorized access to restricted resources. This is a backport of CVE-2021-21024. The vulnerability is patched in versions 19.4.13 and 20.0.9.

CVSS: 9.1 · CWE: CWE-89

View on NVD

]]> [Critical] CVE-2021-21426 – Magento-lts is a long-term support alternative to Magento Community Edition (CE)... https://nvd.nist.gov/vuln/detail/CVE-2021-21426 https://nvd.nist.gov/vuln/detail/CVE-2021-21426 Wed, 21 Apr 2021 21:15:07 +0000 Critical CVE-2021-21426

Magento-lts is a long-term support alternative to Magento Community Edition (CE). In magento-lts versions 19.4.12 and prior and 20.0.8 and prior, there is a vulnerability caused by the unsecured deserialization of an object. A patch in versions 19.4.13 and 20.0.9 was back ported from Zend Framework 3. The vulnerability was assigned CVE-2021-3007 in Zend Framework.

CVSS: 9.8 · CWE: CWE-502

View on NVD

]]> [Critical] CVE-2021-21014 – Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earl... https://nvd.nist.gov/vuln/detail/CVE-2021-21014 https://nvd.nist.gov/vuln/detail/CVE-2021-21014 Thu, 11 Feb 2021 21:15:12 +0000 Critical CVE-2021-21014

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.

CVSS: 9.1 · CWE: CWE-434

View on NVD

]]> [High] CVE-2021-21030 – Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earl... https://nvd.nist.gov/vuln/detail/CVE-2021-21030 https://nvd.nist.gov/vuln/detail/CVE-2021-21030 Thu, 11 Feb 2021 20:15:14 +0000 High CVE-2021-21030

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a stored cross-site scripting (XSS) in the customer address upload feature. Successful exploitation could lead to arbitrary JavaScript execution in the victim's browser. Exploitation of this issue requires user interaction.

CVSS: 8.1 · CWE: CWE-79

View on NVD

]]> [Critical] CVE-2021-21025 – Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earl... https://nvd.nist.gov/vuln/detail/CVE-2021-21025 https://nvd.nist.gov/vuln/detail/CVE-2021-21025 Thu, 11 Feb 2021 20:15:14 +0000 Critical CVE-2021-21025

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the product layout updates. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.

CVSS: 9.1 · CWE: CWE-91

View on NVD

]]> [Critical] CVE-2021-21024 – Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earl... https://nvd.nist.gov/vuln/detail/CVE-2021-21024 https://nvd.nist.gov/vuln/detail/CVE-2021-21024 Thu, 11 Feb 2021 20:15:14 +0000 Critical CVE-2021-21024

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a blind SQL injection vulnerability in the Search module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin console is required for successful exploitation.

CVSS: 9.1 · CWE: CWE-89

View on NVD

]]> [Critical] CVE-2021-21019 – Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earl... https://nvd.nist.gov/vuln/detail/CVE-2021-21019 https://nvd.nist.gov/vuln/detail/CVE-2021-21019 Thu, 11 Feb 2021 20:15:14 +0000 Critical CVE-2021-21019

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the Widgets module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.

CVSS: 9.1 · CWE: CWE-91

View on NVD

]]> [Critical] CVE-2021-21018 – Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earl... https://nvd.nist.gov/vuln/detail/CVE-2021-21018 https://nvd.nist.gov/vuln/detail/CVE-2021-21018 Thu, 11 Feb 2021 20:15:14 +0000 Critical CVE-2021-21018

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to OS command injection via the scheduled operation module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.

CVSS: 9.1 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2021-21016 – Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earl... https://nvd.nist.gov/vuln/detail/CVE-2021-21016 https://nvd.nist.gov/vuln/detail/CVE-2021-21016 Thu, 11 Feb 2021 20:15:13 +0000 Critical CVE-2021-21016

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to OS command injection via the WebAPI. Successful exploitation could lead to remote code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.

CVSS: 9.1 · CWE: CWE-78

View on NVD

]]> [High] CVE-2021-21015 – Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earl... https://nvd.nist.gov/vuln/detail/CVE-2021-21015 https://nvd.nist.gov/vuln/detail/CVE-2021-21015 Thu, 11 Feb 2021 20:15:13 +0000 High CVE-2021-21015

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an OS command injection via the customer attribute save controller. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.

CVSS: 8.0 · CWE: CWE-78

View on NVD

]]> [High] CVE-2020-26295 – OpenMage is a community-driven alternative to Magento CE. In OpenMage before ver... https://nvd.nist.gov/vuln/detail/CVE-2020-26295 https://nvd.nist.gov/vuln/detail/CVE-2020-26295 Thu, 21 Jan 2021 14:15:12 +0000 High CVE-2020-26295

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, an administrator with permission to import/export data and to edit cms pages was able to inject an executable file on the server via layout xml. The latest OpenMage Versions up from 19.4.9 and 20.0.5 have this Issue solved

CVSS: 8.7 · CWE: CWE-22

View on NVD

]]> [High] CVE-2020-26285 – OpenMage is a community-driven alternative to Magento CE. In OpenMage before ver... https://nvd.nist.gov/vuln/detail/CVE-2020-26285 https://nvd.nist.gov/vuln/detail/CVE-2020-26285 Thu, 21 Jan 2021 14:15:12 +0000 High CVE-2020-26285

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, there is a vulnerability which enables remote code execution. In affected versions an administrator with permission to import/export data and to create widget instances was able to inject an executable file on the server. The latest OpenMage Versions up from 19.4.9 and 20.0.5 have this Issue…

CVSS: 8.7 · CWE: CWE-22

View on NVD

]]> [High] CVE-2020-26252 – OpenMage is a community-driven alternative to Magento CE. In OpenMage before ver... https://nvd.nist.gov/vuln/detail/CVE-2020-26252 https://nvd.nist.gov/vuln/detail/CVE-2020-26252 Wed, 20 Jan 2021 22:15:11 +0000 High CVE-2020-26252

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.6, there is a vulnerability which enables remote code execution. In affected versions an administrator with permission to update product data to be able to store an executable file on the server and load it via layout xml. The latest OpenMage Versions up from 19.4.10 and 20.0.6 have this issue s…

CVSS: 8.7 · CWE: CWE-22

View on NVD

]]> [High] CVE-2021-21013 – Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earl... https://nvd.nist.gov/vuln/detail/CVE-2021-21013 https://nvd.nist.gov/vuln/detail/CVE-2021-21013 Wed, 13 Jan 2021 23:15:14 +0000 High CVE-2021-21013

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module. Successful exploitation could lead to sensitive information disclosure and update arbitrary information on another user's account.

CVSS: 8.1 · CWE: CWE-863

View on NVD

]]> [Critical] CVE-2020-24407 – Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file ... https://nvd.nist.gov/vuln/detail/CVE-2020-24407 https://nvd.nist.gov/vuln/detail/CVE-2020-24407 Mon, 09 Nov 2020 01:15:12 +0000 Critical CVE-2020-24407

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components.

CVSS: 9.1 · CWE: CWE-434

View on NVD

]]> [High] CVE-2020-24400 – Magento versions 2.4.0 and 2.3.5 (and earlier) are affected by an SQL Injection ... https://nvd.nist.gov/vuln/detail/CVE-2020-24400 https://nvd.nist.gov/vuln/detail/CVE-2020-24400 Mon, 09 Nov 2020 01:15:12 +0000 High CVE-2020-24400

Magento versions 2.4.0 and 2.3.5 (and earlier) are affected by an SQL Injection vulnerability that could lead to sensitive information disclosure. This vulnerability could be exploited by an authenticated user with permissions to the product listing page to read data from the database.

CVSS: 7.1 · CWE: CWE-89

View on NVD

]]> [High] CVE-2020-15244 – In Magento (rubygems openmage/magento-lts package) before versions 19.4.8 and 20... https://nvd.nist.gov/vuln/detail/CVE-2020-15244 https://nvd.nist.gov/vuln/detail/CVE-2020-15244 Wed, 21 Oct 2020 20:15:13 +0000 High CVE-2020-15244

In Magento (rubygems openmage/magento-lts package) before versions 19.4.8 and 20.0.4, an admin user can generate soap credentials that can be used to trigger RCE via PHP Object Injection through product attributes and a product. The issue is patched in versions 19.4.8 and 20.0.4.

CVSS: 8.0 · CWE: CWE-74

View on NVD

]]> [Critical] CVE-2020-5777 – MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass ... https://nvd.nist.gov/vuln/detail/CVE-2020-5777 https://nvd.nist.gov/vuln/detail/CVE-2020-5777 Tue, 01 Sep 2020 21:15:12 +0000 Critical CVE-2020-5777

MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure. A remote attacker can trigger this connection failure if the Mysql setting max_connections (default 151) is lower than Apache (or another web server) setting MaxRequestWorkers (formerly MaxClients) (default 256). This can be done…

CVSS: 9.8 · CWE: CWE-287

View on NVD

]]> [High] CVE-2020-13404 – The ATOS/Sips (aka Atos-Magento) community module 3.0.0 to 3.0.5 for Magento all... https://nvd.nist.gov/vuln/detail/CVE-2020-13404 https://nvd.nist.gov/vuln/detail/CVE-2020-13404 Wed, 05 Aug 2020 21:15:11 +0000 High CVE-2020-13404

The ATOS/Sips (aka Atos-Magento) community module 3.0.0 to 3.0.5 for Magento allows command injection.

CVSS: 8.8 · CWE: CWE-78

View on NVD

]]> [Critical] CVE-2020-9691 – Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a dom-based... https://nvd.nist.gov/vuln/detail/CVE-2020-9691 https://nvd.nist.gov/vuln/detail/CVE-2020-9691 Wed, 29 Jul 2020 13:15:10 +0000 Critical CVE-2020-9691

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a dom-based cross-site scripting vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.6 · CWE: CWE-79

View on NVD

]]> [Critical] CVE-2020-9664 – Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object... https://nvd.nist.gov/vuln/detail/CVE-2020-9664 https://nvd.nist.gov/vuln/detail/CVE-2020-9664 Wed, 22 Jul 2020 20:15:12 +0000 Critical CVE-2020-9664

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.8 · CWE: CWE-502

View on NVD

]]> [Critical] CVE-2020-9632 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9632 https://nvd.nist.gov/vuln/detail/CVE-2020-9632 Fri, 26 Jun 2020 21:15:17 +0000 Critical CVE-2020-9632

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2020-9631 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9631 https://nvd.nist.gov/vuln/detail/CVE-2020-9631 Fri, 26 Jun 2020 21:15:17 +0000 Critical CVE-2020-9631

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2020-9630 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9630 https://nvd.nist.gov/vuln/detail/CVE-2020-9630 Fri, 26 Jun 2020 21:15:17 +0000 Critical CVE-2020-9630

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a business logic error vulnerability. Successful exploitation could lead to privilege escalation.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [High] CVE-2020-9591 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9591 https://nvd.nist.gov/vuln/detail/CVE-2020-9591 Fri, 26 Jun 2020 21:15:17 +0000 High CVE-2020-9591

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to unauthorized access to admin panel.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2020-9588 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9588 https://nvd.nist.gov/vuln/detail/CVE-2020-9588 Fri, 26 Jun 2020 21:15:17 +0000 High CVE-2020-9588

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.

CVSS: 7.2 · CWE: CWE-203

View on NVD

]]> [High] CVE-2020-9587 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9587 https://nvd.nist.gov/vuln/detail/CVE-2020-9587 Fri, 26 Jun 2020 21:15:17 +0000 High CVE-2020-9587

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an authorization bypass vulnerability. Successful exploitation could lead to potentially unauthorized product discounts.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [Critical] CVE-2020-9585 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9585 https://nvd.nist.gov/vuln/detail/CVE-2020-9585 Fri, 26 Jun 2020 21:15:17 +0000 Critical CVE-2020-9585

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2020-9583 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9583 https://nvd.nist.gov/vuln/detail/CVE-2020-9583 Fri, 26 Jun 2020 21:15:17 +0000 Critical CVE-2020-9583

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.8 · CWE: CWE-77

View on NVD

]]> [Critical] CVE-2020-9582 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9582 https://nvd.nist.gov/vuln/detail/CVE-2020-9582 Fri, 26 Jun 2020 21:15:16 +0000 Critical CVE-2020-9582

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.8 · CWE: CWE-77

View on NVD

]]> [Critical] CVE-2020-9580 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9580 https://nvd.nist.gov/vuln/detail/CVE-2020-9580 Fri, 26 Jun 2020 21:15:16 +0000 Critical CVE-2020-9580

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2020-9579 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9579 https://nvd.nist.gov/vuln/detail/CVE-2020-9579 Fri, 26 Jun 2020 21:15:16 +0000 Critical CVE-2020-9579

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2020-9578 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9578 https://nvd.nist.gov/vuln/detail/CVE-2020-9578 Fri, 26 Jun 2020 21:15:16 +0000 Critical CVE-2020-9578

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.8 · CWE: CWE-77

View on NVD

]]> [Critical] CVE-2020-9576 – Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and ... https://nvd.nist.gov/vuln/detail/CVE-2020-9576 https://nvd.nist.gov/vuln/detail/CVE-2020-9576 Fri, 26 Jun 2020 21:15:16 +0000 Critical CVE-2020-9576

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.8 · CWE: CWE-77

View on NVD

]]> [Critical] CVE-2014-1634 – SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via t... https://nvd.nist.gov/vuln/detail/CVE-2014-1634 https://nvd.nist.gov/vuln/detail/CVE-2014-1634 Mon, 09 Mar 2020 17:15:11 +0000 Critical CVE-2014-1634

SQL Injection exists in Advanced Newsletter Magento extension before 2.3.5 via the /store/advancednewsletter/index/subscribeajax/an_category_id/ PATH_INFO.

CVSS: 9.8 · CWE: CWE-89

View on NVD

]]> [High] CVE-2020-8818 – An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magen... https://nvd.nist.gov/vuln/detail/CVE-2020-8818 https://nvd.nist.gov/vuln/detail/CVE-2020-8818 Tue, 25 Feb 2020 02:15:12 +0000 High CVE-2020-8818

An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore bypass the payment process (e.g., spoof an order status by manually sending an IPN callback reques…

CVSS: 8.1 · CWE: CWE-346

View on NVD

]]> [High] CVE-2012-6091 – Zend_XmlRpc Class in Magento before 1.7.0.2 contains an information disclosure v... https://nvd.nist.gov/vuln/detail/CVE-2012-6091 https://nvd.nist.gov/vuln/detail/CVE-2012-6091 Thu, 13 Feb 2020 20:15:09 +0000 High CVE-2012-6091

Zend_XmlRpc Class in Magento before 1.7.0.2 contains an information disclosure vulnerability.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2020-3719 – Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, an... https://nvd.nist.gov/vuln/detail/CVE-2020-3719 https://nvd.nist.gov/vuln/detail/CVE-2020-3719 Wed, 29 Jan 2020 19:15:14 +0000 High CVE-2020-3719

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. Successful exploitation could lead to sensitive information disclosure.

CVSS: 7.5 · CWE: CWE-89

View on NVD

]]> [Critical] CVE-2020-3718 – Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, an... https://nvd.nist.gov/vuln/detail/CVE-2020-3718 https://nvd.nist.gov/vuln/detail/CVE-2020-3718 Wed, 29 Jan 2020 19:15:13 +0000 Critical CVE-2020-3718

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2020-3716 – Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, an... https://nvd.nist.gov/vuln/detail/CVE-2020-3716 https://nvd.nist.gov/vuln/detail/CVE-2020-3716 Wed, 29 Jan 2020 19:15:13 +0000 Critical CVE-2020-3716

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a deserialization of untrusted data vulnerability. Successful exploitation could lead to arbitrary code execution.

CVSS: 9.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2015-6497 – The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Ma... https://nvd.nist.gov/vuln/detail/CVE-2015-6497 https://nvd.nist.gov/vuln/detail/CVE-2015-6497 Wed, 15 Jan 2020 17:15:13 +0000 High CVE-2015-6497

The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Edition (EE) before 1.14.2.1, when used with PHP before 5.4.24 or 5.5.8, allows remote authenticated users to execute arbitrary PHP code via the productData parameter to index.php/api/v2_soap.

CVSS: 8.8 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2019-8158 – An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, M... https://nvd.nist.gov/vuln/detail/CVE-2019-8158 https://nvd.nist.gov/vuln/detail/CVE-2019-8158 Wed, 06 Nov 2019 01:15:25 +0000 Critical CVE-2019-8158

An XPath entity injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An attacker can craft a GET request to page cache block rendering module that gets passed to XML data processing engine without validation. The crafted key/value GET request data allows an attacker to limited access to underlying XML data.

CVSS: 9.8 · CWE: CWE-91

View on NVD

]]> [High] CVE-2019-8156 – A server-side request forgery (SSRF) vulnerability exists in Magento 2.2 prior t... https://nvd.nist.gov/vuln/detail/CVE-2019-8156 https://nvd.nist.gov/vuln/detail/CVE-2019-8156 Wed, 06 Nov 2019 01:15:25 +0000 High CVE-2019-8156

A server-side request forgery (SSRF) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to modify store configurations can manipulate the connector api endpoint to enable remote code execution.

CVSS: 7.2 · CWE: CWE-918

View on NVD

]]> [High] CVE-2019-8231 – In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with ... https://nvd.nist.gov/vuln/detail/CVE-2019-8231 https://nvd.nist.gov/vuln/detail/CVE-2019-8231 Wed, 06 Nov 2019 00:15:13 +0000 High CVE-2019-8231

In Magento to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code through custom layout modification.

CVSS: 7.2 · CWE: N/A

View on NVD

]]> [High] CVE-2019-8230 – In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user... https://nvd.nist.gov/vuln/detail/CVE-2019-8230 https://nvd.nist.gov/vuln/detail/CVE-2019-8230 Wed, 06 Nov 2019 00:15:13 +0000 High CVE-2019-8230

In Magentoprior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through a crafted support/output path.

CVSS: 7.2 · CWE: N/A

View on NVD

]]> [High] CVE-2019-8229 – In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated use... https://nvd.nist.gov/vuln/detail/CVE-2019-8229 https://nvd.nist.gov/vuln/detail/CVE-2019-8229 Wed, 06 Nov 2019 00:15:13 +0000 High CVE-2019-8229

In Magento prior to 1.9.4.3, and Magento prior to 1.14.4.3, an authenticated user with administrative privileges to edit product attributes can execute arbitrary code through crafted layout updates.

CVSS: 7.2 · CWE: N/A

View on NVD

]]> [High] CVE-2019-8159 – A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Mag... https://nvd.nist.gov/vuln/detail/CVE-2019-8159 https://nvd.nist.gov/vuln/detail/CVE-2019-8159 Wed, 06 Nov 2019 00:15:12 +0000 High CVE-2019-8159

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with system data manipulation privileges can execute aribitrary code through arbitrary file deletion and OS command injection.

CVSS: 8.8 · CWE: CWE-78

View on NVD

]]> [High] CVE-2019-8155 – Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in t... https://nvd.nist.gov/vuln/detail/CVE-2019-8155 https://nvd.nist.gov/vuln/detail/CVE-2019-8155 Wed, 06 Nov 2019 00:15:12 +0000 High CVE-2019-8155

Magento prior to 1.9.4.3 and prior to 1.14.4.3 included a user's CSRF token in the URL of a GET request. This could be exploited by an attacker with access to network traffic to perform unauthorized actions.

CVSS: 7.5 · CWE: CWE-352

View on NVD

]]> [High] CVE-2019-8154 – A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Mag... https://nvd.nist.gov/vuln/detail/CVE-2019-8154 https://nvd.nist.gov/vuln/detail/CVE-2019-8154 Wed, 06 Nov 2019 00:15:12 +0000 High CVE-2019-8154

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to modify product catalogs can trigger PHP file inclusion through a crafted XML file that specifies product design update.

CVSS: 8.8 · CWE: CWE-829

View on NVD

]]> [High] CVE-2019-8151 – A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Mag... https://nvd.nist.gov/vuln/detail/CVE-2019-8151 https://nvd.nist.gov/vuln/detail/CVE-2019-8151 Wed, 06 Nov 2019 00:15:12 +0000 High CVE-2019-8151

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to manipulate shippment settings can execute arbitrary code through server-side request forgery due to unsafe handling of a carrier gateway.

CVSS: 7.2 · CWE: CWE-918

View on NVD

]]> [High] CVE-2019-8150 – A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Mag... https://nvd.nist.gov/vuln/detail/CVE-2019-8150 https://nvd.nist.gov/vuln/detail/CVE-2019-8150 Wed, 06 Nov 2019 00:15:12 +0000 High CVE-2019-8150

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to manipulate layouts and images can insert a malicious payload into the page layout.

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2019-8149 – Insecure authentication and session management vulnerability exists in Magento 2... https://nvd.nist.gov/vuln/detail/CVE-2019-8149 https://nvd.nist.gov/vuln/detail/CVE-2019-8149 Wed, 06 Nov 2019 00:15:12 +0000 Critical CVE-2019-8149

Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can append arbitrary session id that will not be invalidated by subsequent authentication.

CVSS: 9.8 · CWE: CWE-613

View on NVD

]]> [Critical] CVE-2019-8144 – A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2... https://nvd.nist.gov/vuln/detail/CVE-2019-8144 https://nvd.nist.gov/vuln/detail/CVE-2019-8144 Wed, 06 Nov 2019 00:15:11 +0000 Critical CVE-2019-8144

A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can insert a malicious payload through PageBuilder template methods.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [High] CVE-2019-8141 – A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Mag... https://nvd.nist.gov/vuln/detail/CVE-2019-8141 https://nvd.nist.gov/vuln/detail/CVE-2019-8141 Wed, 06 Nov 2019 00:15:11 +0000 High CVE-2019-8141

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user with administrative privileges (system level import) can execute arbitrary code through a Phar deserialization vulnerability in the import functionality.

CVSS: 7.2 · CWE: CWE-502

View on NVD

]]> [High] CVE-2019-8137 – A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Mag... https://nvd.nist.gov/vuln/detail/CVE-2019-8137 https://nvd.nist.gov/vuln/detail/CVE-2019-8137 Wed, 06 Nov 2019 00:15:11 +0000 High CVE-2019-8137

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to manipulate CMS section of the website can trigger remote code execution via custom layout update.

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2019-8136 – An insecure component vulnerability exists in Magento 2.2 prior to 2.2.10, Magen... https://nvd.nist.gov/vuln/detail/CVE-2019-8136 https://nvd.nist.gov/vuln/detail/CVE-2019-8136 Wed, 06 Nov 2019 00:15:11 +0000 Critical CVE-2019-8136

An insecure component vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Magento 2 codebase leveraged outdated versions of HTTP specification abstraction implemented in symphony component.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2019-8135 – A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Mag... https://nvd.nist.gov/vuln/detail/CVE-2019-8135 https://nvd.nist.gov/vuln/detail/CVE-2019-8135 Wed, 06 Nov 2019 00:15:10 +0000 Critical CVE-2019-8135

A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. Dependency injection through Symphony framework allows service identifiers to be derived from user controlled data, which can lead to remote code execution.

CVSS: 9.8 · CWE: CWE-74

View on NVD

]]> [High] CVE-2019-8134 – A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3... https://nvd.nist.gov/vuln/detail/CVE-2019-8134 https://nvd.nist.gov/vuln/detail/CVE-2019-8134 Wed, 06 Nov 2019 00:15:10 +0000 High CVE-2019-8134

A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with marketing privileges can execute arbitrary SQL queries in the database when accessing email template variables.

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [High] CVE-2019-8130 – A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3... https://nvd.nist.gov/vuln/detail/CVE-2019-8130 https://nvd.nist.gov/vuln/detail/CVE-2019-8130 Wed, 06 Nov 2019 00:15:10 +0000 High CVE-2019-8130

A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. A user with store manipulation privileges can execute arbitrary SQL queries by getting access to the database connection through group instance in email templates.

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [High] CVE-2019-8127 – A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3... https://nvd.nist.gov/vuln/detail/CVE-2019-8127 https://nvd.nist.gov/vuln/detail/CVE-2019-8127 Tue, 05 Nov 2019 23:15:12 +0000 High CVE-2019-8127

A SQL injection vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with privileges to an account with Newsletter Template editing permission could exfiltrate the Admin login data, and reset their password, effectively performing a privilege escalation.

CVSS: 8.8 · CWE: CWE-89

View on NVD

]]> [High] CVE-2019-8125 – A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.1... https://nvd.nist.gov/vuln/detail/CVE-2019-8125 https://nvd.nist.gov/vuln/detail/CVE-2019-8125 Tue, 05 Nov 2019 23:15:12 +0000 High CVE-2019-8125

A remote code execution vulnerability exists in Magento 1 prior to 1.9.x and 1.14.x. An authenticated admin user can modify configuration parameters via crafted support configuration. The modification can lead to remote code execution.

CVSS: 7.2 · CWE: N/A

View on NVD

]]> [High] CVE-2019-8122 – A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Mag... https://nvd.nist.gov/vuln/detail/CVE-2019-8122 https://nvd.nist.gov/vuln/detail/CVE-2019-8122 Tue, 05 Nov 2019 23:15:12 +0000 High CVE-2019-8122

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user with privileges to create products can craft custom layout update and use import product functionality to enable remote code execution.

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2019-8121 – An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magen... https://nvd.nist.gov/vuln/detail/CVE-2019-8121 https://nvd.nist.gov/vuln/detail/CVE-2019-8121 Tue, 05 Nov 2019 23:15:12 +0000 Critical CVE-2019-8121

An insecure component vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. Magento 2 codebase leveraged outdated versions of JS libraries (Bootstrap, jquery, Knockout) with known security vulnerabilities.

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [High] CVE-2019-8119 – A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Mag... https://nvd.nist.gov/vuln/detail/CVE-2019-8119 https://nvd.nist.gov/vuln/detail/CVE-2019-8119 Tue, 05 Nov 2019 23:15:12 +0000 High CVE-2019-8119

A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated admin user with import product privileges can delete files through bulk product import and inject code into XSLT file. The combination of these manipulations can lead to remote code execution.

CVSS: 7.2 · CWE: N/A

View on NVD

]]> [High] CVE-2019-8116 – Insecure authentication and session management vulnerability exists in Magento 2... https://nvd.nist.gov/vuln/detail/CVE-2019-8116 https://nvd.nist.gov/vuln/detail/CVE-2019-8116 Tue, 05 Nov 2019 23:15:12 +0000 High CVE-2019-8116

Insecure authentication and session management vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can leverage a guest session id value following a successful login to gain access to customer account index page.

CVSS: 7.5 · CWE: CWE-384

View on NVD

]]> [High] CVE-2019-8114 – A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1... https://nvd.nist.gov/vuln/detail/CVE-2019-8114 https://nvd.nist.gov/vuln/detail/CVE-2019-8114 Tue, 05 Nov 2019 23:15:12 +0000 High CVE-2019-8114

A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to import features can execute arbitrary code via crafted configuration archive file upload.

CVSS: 7.2 · CWE: CWE-434

View on NVD

]]> [High] CVE-2019-8112 – A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2... https://nvd.nist.gov/vuln/detail/CVE-2019-8112 https://nvd.nist.gov/vuln/detail/CVE-2019-8112 Tue, 05 Nov 2019 23:15:11 +0000 High CVE-2019-8112

A security bypass vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can bypass the email confirmation mechanism via GET request that captures relevant account data obtained from the POST response related to new user creation.

CVSS: 7.5 · CWE: CWE-345

View on NVD

]]>