magento/community-edition vulnerabilities (Packagist)
361 vulnerabilities.
magento/community-editionPackagistAdobe Commerce checkout improper input validation leads to remote code execution9.8 Criticalmagento/community-editionPackagistAdobe Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Cart Addition6.5 Mediummagento/community-editionPackagistMagento Commerce improper authorization allows an authenticated user to perform certain functions without permission5.0 Mediummagento/community-editionPackagistMagento Commerce information disclosure during upload action leveraging a specially crafted file3.7 Lowmagento/community-editionPackagistMagento Commerce GraphQL Improper Input Validation Could Lead To Denial Of Service7.5 Highmagento/community-editionPackagistMagento Commerce Stored Cross-site Scripting Vulnerability6.5 Mediummagento/community-editionPackagistMagento Commerce Authenticated Blind SSRF Could Lead To Remote Code Execution8.0 Highmagento/community-editionPackagistMagento Commerce API File Option Upload Extension Improper Input Validation Vulnerability Could Lead To Remote Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Improper Input Validation During Checkout Process Could Lead To Privilege Escalation7.5 Highmagento/community-editionPackagistMagento Commerce Improper Input Validation Could Lead To Remote Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Improper Input Validation Could Lead To Remote Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Customer Edition Improper Input Validation Could Lead To Remote Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce XML Injection Vulnerability In The 'City' Field Could Lead To Remote Code Execution8.2 Highmagento/community-editionPackagistMagento Commerce Improper Neutralization of Special Elements Used In A Command9.1 Criticalmagento/community-editionPackagistMagento Commerce Path Traversal In `theme[preview_image]` Parameter Could Lead To Remote Code Execution7.2 Highmagento/community-editionPackagistMagento Commerce `quoteId` parameter Incorrect Authorization Vulnerability Could Lead To Information Disclosure6.5 Mediummagento/community-editionPackagistMagento Commerce Improper Authorization Vulnerability Could Lead To Remote Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Stored Cross-site Scripting Vulnerability6.5 Mediummagento/community-editionPackagistMagento Commerce Improper Input Validation Could Lead To Information Exposure and Privilege Escalation8.3 Highmagento/community-editionPackagistMagento Commerce Multishipping Module Improper Input Validation Could Lead To Information Exposure6.5 Mediummagento/community-editionPackagistMagento Commerce XML Injection Vulnerability Could Lead To Remote Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Improper Input Validation Could Lead To Remote Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Widgets Module XML Injection Vulnerability Could Lead To Remote Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Improper Authorization Vulnerability Could Lead To Information Exposure6.5 Mediummagento/community-editionPackagistMagento Commerce Gift Card Business Logic Error6.5 Mediummagento/community-editionPackagistMagento Commerce path traversal vulnerability in child theme store creation5.4 Mediummagento/community-editionPackagistMagento Commerce improper input validation in customer customer webapi5.3 Mediummagento/community-editionPackagistMagento Commerce insecure storage of sensitive documentation7.5 Highmagento/community-editionPackagistMagento Commerce improper Authorization via the 'Create Customer' endpoint6.5 Mediummagento/community-editionPackagistMagento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution6.9 Mediummagento/community-editionPackagistMagento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access5.6 Mediummagento/community-editionPackagistMagento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution4.8 Mediummagento/community-editionPackagistMagento Commerce XML Injection Could Lead To Arbitrary Code Execution9.1 Criticalmagento/community-editionPackagistMagnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Stored Cross-site Scripting Could Lead To Arbitrary Javascript Execution8.1 Highmagento/community-editionPackagistMagento Commerce Cross-Site Request Forgery (CSRF) Could Lead To Unauthorized Data Modification4.3 Mediummagento/community-editionPackagistMagento Commerce Incorrect permissions Could Lead To Unauthorized Access5.3 Mediummagento/community-editionPackagistMagento Commerce Blind SQL Injection Could Lead To Unauthorized Access9.1 Criticalmagento/community-editionPackagistMagento Commerce Stored Cross Site Scripting Vulnerability Could Lead To Arbitrary Code Execution4.8 Mediummagento/community-editionPackagistMagento Commerce Incorrect permissions Could Lead To Unauthorized Access5.3 Mediummagento/community-editionPackagistMagento Commerce Improper Access Control Vulnerability5.3 Mediummagento/community-editionPackagistMagento Commerce XML Injection Could Lead To Remote Code Execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution8.0 Highmagento/community-editionPackagistMagento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access5.6 Mediummagento/community-editionPackagistIncorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST API2.7 Lowmagento/community-editionPackagistArbitrary code execution via file import functionality9.1 Criticalmagento/community-editionPackagistDocument root path disclosure on Maintenance page3.7 Low- Show moreLoading…