Magento OS command injection via the WebAPI
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the Widgets module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.
Magento OS Command Injection
Magento Blind SQL Injection in the Search module
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the product layout updates. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.
Magento stored cross-site scripting (XSS) in the customer address upload feature
Magento OS command injection via the customer attribute save controller
Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Violation of Secure Design Principles vulnerability in RMA PDF filename formats. Successful exploitation could allow an attacker to get unauthorized access to restricted resources.
Magento Path Traversal vulnerability
Magento Insufficient Session Expiration
Magento Insufficient Session Expiration
Magento Improper Access Control
Magento Improper input validation vulnerability
Magento improper authorization vulnerability in the integrations module
Magento Insecure Direct Object Reference (IDOR) in the product module
Magento stored cross-site scripting vulnerability in the admin console
Magento Reflected Cross-site Scripting vulnerability via 'file' parameter
Magento cross-site request forgery (CSRF) vulnerability via the GraphQL API