Security
فارسی
All products

magento/project-community-edition

Composer · Package
161 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Magento Open Source affected by Improper Input ValidationCVE-2023-22248 · GHSA-5JFG-PHX7-7FXG magento/community-editionmagento/project-community-edition Composer Medium Fix reported
Magento Open Source allows Cross-Site Scripting (XSS)CVE-2024-20719 · GHSA-264G-F7V8-Q5QQ magento/community-editionmagento/project-community-edition Composer High Fix reported
Magento Open Source allows Uncontrolled Resource ConsumptionCVE-2024-20716 · GHSA-C9H9-H5GF-885R magento/community-editionmagento/project-community-edition Composer Medium Fix reported
Magento Open Source allows OS Command InjectionCVE-2024-20720 · GHSA-525F-PVJ5-VQMQ magento/community-editionmagento/project-community-edition Composer High Fix reported
Magento Open Source allows Cross-Site Request Forgery (CSRF)CVE-2024-20718 · GHSA-HQGJ-4396-HMXV magento/community-editionmagento/project-community-edition Composer Medium Fix reported
Magento affected by a server-side denial-of-service using a GraphQL fieldCVE-2021-36044 · GHSA-WR57-3H2F-3Q95 magento/community-editionmagento/project-community-edition Composer High Fix reported
Magento executes code via the API File Option Upload ExtensionCVE-2021-36042 · GHSA-6CWV-WJ7V-73XP magento/community-editionmagento/project-community-edition Composer Critical Fix reported
Magento affected by a blind SSRF vulnerability in the bundled dotmailer extensionCVE-2021-36043 · GHSA-36XQ-7W8W-XP68 magento/community-editionmagento/project-community-edition Composer High Fix reported
Magento vulnerable to file upload attackCVE-2021-36041 · GHSA-MX5M-J5XR-JG8C magento/community-editionmagento/project-community-edition Composer High Fix reported
Magento affected by remote code execution via a file uploadCVE-2021-36034 · GHSA-J46H-QJJV-CXFJ magento/community-editionmagento/project-community-edition Composer High Fix reported
Magento discloses sensitive informationCVE-2021-36039 · GHSA-3G7M-G8QM-X6J5 magento/community-editionmagento/project-community-edition Composer Medium Fix reported
Magento is affected by an improper input validation vulnerability while saving a customer's detailsCVE-2021-36025 · GHSA-GVFX-9M9V-H839 magento/community-editionmagento/project-community-edition Composer Critical Fix reported
Magento is affected by an improper input validation vulnerabilityCVE-2021-36032 · GHSA-5VW8-R55W-F4Q4 magento/community-editionmagento/project-community-edition Composer High Fix reported
Magento has an XML Injection vulnerabilityCVE-2021-36028 · GHSA-5PJJ-7FQ8-9GPF magento/community-editionmagento/project-community-edition Composer Critical Fix reported
Magento has a file extension restrictions bypassCVE-2021-36040 · GHSA-2PQ5-GPQF-G4R3 magento/community-editionmagento/project-community-edition Composer Critical Fix reported
Magento discloses sensitive information via the Multishipping ModuleCVE-2021-36038 · GHSA-WGPR-9675-8R67 magento/community-editionmagento/project-community-edition Composer Medium Fix reported
Magento is affected by an improper authorization vulnerabilityCVE-2021-36037 · GHSA-VRQ2-W7R7-3FP2 magento/community-editionmagento/project-community-edition Composer Medium Fix reported
Magento is affected by an os command injection via the Data collection endpointCVE-2021-36024 · GHSA-QMQ6-JPVG-J547 magento/community-editionmagento/project-community-edition Composer High Fix reported
Magento allows attackers to alter the price of itemsCVE-2021-36030 · GHSA-RHFF-65HP-55RW magento/community-editionmagento/project-community-edition Composer High Fix reported
Magento XML Injection vulnerability in the Widgets ModuleCVE-2021-36033 · GHSA-P746-QW73-QMMX magento/community-editionmagento/project-community-edition Composer Critical Fix reported