CVE-2021-28585: Magento Improper input validation vulnerability
Magento Improper input validation vulnerability
Other sources
Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper input validation vulnerability in the New customer WebAPI.Successful exploitation could allow an attacker to send unsolicited spam e-mails.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/magento/community-editionto a version that resolves this vulnerability.Fixed in 2.4.2-p1 - Upgrade
Upgrade
composer/magento/community-editionto a version that resolves this vulnerability.Fixed in 2.3.7
Event History
Frequently Asked Questions
What is the vulnerability ID for this Magento vulnerability?
The vulnerability ID for this Magento vulnerability is CVE-2021-28585.
What is the severity of CVE-2021-28585?
The severity of CVE-2021-28585 is medium (5.3).
Which versions of Magento are affected by CVE-2021-28585?
Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier), and 2.3.6-p1 (and earlier) are affected by CVE-2021-28585.
What is the impact of CVE-2021-28585?
Successful exploitation of CVE-2021-28585 could allow an attacker to send unsolicited spam e-mails.
Where can I find more information about CVE-2021-28585?
You can find more information about CVE-2021-28585 at the following link: [link](https://helpx.adobe.com/security/products/magento/apsb21-30.html)