CVE-2021-36029

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization vulnerability. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution.
References
Configurations

Configuration 1

cpe:2.3:a:adobe:magento_open_source:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:adobe_commerce:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:adobe_commerce:2.4.2:p1:*:*:*:*:*:*
cpe:2.3:a:adobe:adobe_commerce:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:magento_open_source:2.4.2:p1:*:*:*:*:*:*
cpe:2.3:a:adobe:magento_open_source:*:*:*:*:*:*:*:*

Information

Published : 2021-09-01 03:15

Updated : 2022-10-27 12:48


NVD link : CVE-2021-36029

Mitre link : CVE-2021-36029

Products Affected