CVE-2021-36038: Magento Commerce Multishipping Module Improper Input Validation Could Lead To Information Exposure
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability in the Multishipping Module. An authenticated attacker could leverage this vulnerability to achieve sensitive information disclosure.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this Magento Commerce vulnerability?
The vulnerability ID for this Magento Commerce vulnerability is CVE-2021-36038.
What is the impacted software for this vulnerability?
The impacted software for this vulnerability includes Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier), and 2.3.7 (and earlier).
What is the severity of CVE-2021-36038?
The severity of CVE-2021-36038 is medium with a CVSS score of 6.5.
What is the description of CVE-2021-36038?
CVE-2021-36038 is an improper input validation vulnerability in the Multishipping Module of Magento Commerce that could be exploited by an authenticated attacker to achieve sensitive information disclosure.
How can I fix CVE-2021-36038 in Magento Commerce?
To fix CVE-2021-36038 in Magento Commerce, it is recommended to update to the patched versions 2.4.3, 2.4.2-p2, and 2.3.8, which address the vulnerability.