magento vulnerabilities (Bitnami)
96 vulnerabilities.
-
magentoBitnami Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 4.8 Medium -
magentoBitnami Adobe Commerce | Incorrect Authorization (CWE-863) 5.4 Medium -
magentoBitnami Adobe Commerce | Improper Access Control (CWE-284) 2.7 Low -
magentoBitnami Adobe Commerce | Improper Access Control (CWE-284) 5.3 Medium -
magentoBitnami Adobe Commerce | Improper Access Control (CWE-284) 2.7 Low -
magentoBitnami Adobe Commerce | Incorrect Authorization (CWE-863) 6.5 Medium -
magentoBitnami Adobe Commerce | Improper Access Control (CWE-284) 4.3 Medium -
magentoBitnami Adobe Commerce | Incorrect Authorization (CWE-863) 5.4 Medium -
magentoBitnami Adobe Commerce | Improper Authentication (CWE-287) 8.8 High -
magentoBitnami Adobe Commerce | Information Exposure (CWE-200) 2.7 Low -
magentoBitnami Adobe Commerce | Improper Access Control (CWE-284) 4.3 Medium -
magentoBitnami Adobe Commerce | Improper Access Control (CWE-284) 2.7 Low -
magentoBitnami Adobe Commerce | Incorrect Authorization (CWE-863) 4.3 Medium -
magentoBitnami Insecure Direct Object Reference - An attacker can able to erase the victim quote details 5.3 Medium -
magentoBitnami Customer account takeover via web API call & subsequent password reset 8.1 High -
magentoBitnami Adobe Commerce | Improper Input Validation (CWE-20) 7.2 High -
magentoBitnami SSRF in service connector 6.5 Medium -
magentoBitnami RCE in the Adobe Commerce Webhook module through a legit webhook definition 7.2 High -
magentoBitnami Adobe Commerce | Improper Access Control (CWE-284) 5.3 Medium -
magentoBitnami Stored Cross Site Scripting in Order Comment 4.8 Medium -
magentoBitnami Adobe Commerce | Improper Authorization (CWE-285) 8.2 High -
magentoBitnami XXE can expose crypt key and other secrets granting full admin access 9.8 Critical -
magentoBitnami Large attack surface through legit webhook usage in Adobe Commerce 9.1 Critical -
magentoBitnami Adobe Commerce | Improper Input Validation (CWE-20) 9.0 Critical -
magentoBitnami Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) 8.1 High -
magentoBitnami Magento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code Execution 7.2 High -
magentoBitnami Magento Commerce CMS Page Improper Input Validation Could Lead To Remote Code Execution 7.2 High -
magentoBitnami Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution 9.1 Critical -
magentoBitnami [CVE-2021-36032] Magento IDOR Leads to Account Takeover 8.8 High -
magentoBitnami Adobe Commerce Improper Access Control Security feature bypass 5.3 Medium -
magentoBitnami Adobe Commerce Stored XSS Arbitrary code execution 6.1 Medium -
magentoBitnami Adobe Commerce XML Injection Arbitrary code execution 9.1 Critical -
magentoBitnami Adobe Commerce Improper Access Control Privilege escalation 8.8 High -
magentoBitnami Adobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution 8.5 High -
magentoBitnami Adobe Commerce Improper Authorization Privilege escalation 7.5 High -
magentoBitnami Adobe Commerce Stored XSS Arbitrary code execution 4.8 Medium -
magentoBitnami Adobe Commerce checkout improper input validation leads to remote code execution 9.8 Critical -
magentoBitnami Magento Commerce improper authorization allows an authenticated user to perform certain functions without permission 5.0 Medium -
magentoBitnami Magento Commerce information disclosure during upload action leveraging a specially crafted file 3.7 Low -
magentoBitnami Magento Commerce path traversal vulnerability in child theme store creation 5.4 Medium -
magentoBitnami Magento Commerce improper input validation in customer customer webapi 5.3 Medium -
magentoBitnami Magento Commerce insecure storage of sensitive documentation 7.5 High -
magentoBitnami Magento Commerce improper Authorization via the 'Create Customer' endpoint 6.5 Medium -
magentoBitnami Magento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution 6.9 Medium -
magentoBitnami Magento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution 9.1 Critical -
magentoBitnami Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution 9.1 Critical -
magentoBitnami Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access 5.6 Medium -
magentoBitnami Magento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution 4.8 Medium -
magentoBitnami Magento Commerce XML Injection Could Lead To Arbitrary Code Execution 9.1 Critical -
magentoBitnami Magnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code Execution 9.1 Critical - Show olderLoading…