CVE-2021-21427: Backport for CVE-2021-21024 Blind SQLi from Magento 2
Magento-lts is a long-term support alternative to Magento Community Edition (CE). A vulnerability in magento-lts versions before 19.4.13 and 20.0.9 potentially allows an administrator unauthorized access to restricted resources. This is a backport of CVE-2021-21024. The vulnerability is patched in versions 19.4.13 and 20.0.9.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Magento-lts vulnerability?
The vulnerability ID is CVE-2021-21427.
What is Magento-lts?
Magento-lts is a long-term support alternative to Magento Community Edition (CE).
What is the severity of CVE-2021-21427?
The severity of CVE-2021-21427 is critical with a severity value of 7.2.
How can an administrator potentially gain unauthorized access to restricted resources with CVE-2021-21427?
A vulnerability in magento-lts versions before 19.4.13 and 20.0.9 potentially allows an administrator unauthorized access to restricted resources.
How can I fix the CVE-2021-21427 vulnerability in Magento-lts?
To fix the CVE-2021-21427 vulnerability in Magento-lts, update to version 19.4.13 or 20.0.9.