magento/community-edition vulnerabilities (Packagist)
361 vulnerabilities.
magento/community-editionPackagistMagento Patch SUPEE-10752 - Multiple security enhancements vulnerabilitiesNo scoremagento/community-editionPackagistAdobe Commerce | Improper Input Validation (CWE-20)9.0 Criticalmagento/community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.1 Highmagento/community-editionPackagistForce high-usage of resources by generating unlimited coupons: Adobe Commerce4.9 Mediummagento/community-editionPackagist[Spain] CSRF to delete Requisition Lists at Adobe Commerce4.3 Mediummagento/community-editionPackagist[Adobe Commerce] Stored XSS from low privileged admin user on every admin page, bypassing CVE-2023-292979.1 Criticalmagento/community-editionPackagistCommand injection in data collector backup due to insufficient patching of CVE-2023-382089.1 Criticalmagento/community-editionPackagistAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)5.3 Mediummagento/community-editionPackagistValidate Your Inputs | Cross-site Scripting (Stored XSS) (CWE-79) - Customer to Admin stored XSS with Gift wrapping8.7 Highmagento/community-editionPackagistFull page cache enumeration via cookie X-Magento-Vary7.5 Highmagento/community-editionPackagistError based file extraction via PHP filter chains during product bulk import logic4.9 Mediummagento/community-editionPackagistValidate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)6.8 Mediummagento/community-editionPackagistIncorrect Authorization - Customer account takeover8.8 Highmagento/community-editionPackagistAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)8.0 Highmagento/community-editionPackagistAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)8.0 Highmagento/community-editionPackagistAdobe Commerce | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)8.0 Highmagento/community-editionPackagistAdobe Commerce post-auth improper input validation leads to remote code execution9.1 Criticalmagento/community-editionPackagistMagento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code Execution7.2 Highmagento/community-editionPackagistMagento Commerce CMS Page Improper Input Validation Could Lead To Remote Code Execution7.2 Highmagento/community-editionPackagistMagento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution9.1 Criticalmagento/community-editionPackagistAdobe Commerce XML Injection (aka Blind XPath Injection) Arbitrary file system read7.5 Highmagento/community-editionPackagistValidate Your Inputs | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)9.1 Criticalmagento/community-editionPackagistAdobe Commerce Incorrect Authorization Security feature bypass6.5 Mediummagento/community-editionPackagistAdmin-to-admin stored XSS via cache poisoning9.1 Criticalmagento/community-editionPackagist[Cloud] Customer suspects IDOR vulnerability4.3 Mediummagento/community-editionPackagistInsecure Direct Object Reference (IDOR) in Create Quote Function4.3 Mediummagento/community-editionPackagistBypass Purchase Order Approval using Company User in Adobe Commerce B2B4.3 Mediummagento/community-editionPackagistAdobe Commerce | Improper Input Validation (CWE-20)2.7 Lowmagento/community-editionPackagistServer Side Request Forgery (SSRF) in FedEx carrier integration configuration4.9 Mediummagento/community-editionPackagistServer Side Request Forgery (SSRF) in USPS carrier integration configuration4.9 Mediummagento/community-editionPackagistAdobe Commerce Guest Cart Shipping Address Overwrite IDOR5.3 Mediummagento/community-editionPackagistAdobe Commerce XML Injection Security feature bypass6.5 Mediummagento/community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)4.3 Mediummagento/community-editionPackagistAdobe Commerce Information Exposure Security feature bypass5.3 Mediummagento/community-editionPackagistAdobe Commerce Incorrect Authorization Security feature bypass7.5 Highmagento/community-editionPackagistAdobe Commerce Incorrect Authorization Security feature bypass4.3 Mediummagento/community-editionPackagistAdobe Commerce Improper Access Control Security feature bypass5.3 Mediummagento/community-editionPackagistAdobe Commerce Stored XSS Arbitrary code execution4.8 Mediummagento/community-editionPackagistAdobe Commerce XML Injection Arbitrary file system read7.5 Highmagento/community-editionPackagist[CVE-2021-36032] Magento IDOR Leads to Account Takeover8.8 Highmagento/community-editionPackagistAdobe Commerce Improper Access Control Security feature bypass5.3 Mediummagento/community-editionPackagistAdobe Commerce Stored XSS Arbitrary code execution10.0 Criticalmagento/community-editionPackagistAdobe Commerce Improper Access Control Security feature bypass5.3 Mediummagento/community-editionPackagistAdobe Commerce Improper Access Control Security feature bypass5.3 Mediummagento/community-editionPackagistAdobe Commerce Stored XSS Arbitrary code execution6.1 Mediummagento/community-editionPackagistAdobe Commerce XML Injection Arbitrary code execution9.1 Criticalmagento/community-editionPackagistAdobe Commerce Improper Access Control Privilege escalation8.8 Highmagento/community-editionPackagistAdobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution8.5 Highmagento/community-editionPackagistAdobe Commerce Improper Authorization Privilege escalation7.5 Highmagento/community-editionPackagistAdobe Commerce Stored XSS Arbitrary code execution4.8 Medium- Show moreLoading…