magento/community-edition vulnerabilities (Packagist)
361 vulnerabilities.
magento/community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)4.3 Mediummagento/community-editionPackagistAdobe Commerce | Improper Input Validation (CWE-20)7.6 Highmagento/community-editionPackagistAdobe Commerce | Cross-site Scripting (XSS) (CWE-79)8.1 Highmagento/community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)4.3 Mediummagento/community-editionPackagistAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)4.9 Mediummagento/community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)2.7 Lowmagento/community-editionPackagistAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)3.1 Lowmagento/community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)6.5 Mediummagento/community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)4.3 Mediummagento/community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)5.4 Mediummagento/community-editionPackagistAdobe Commerce | Information Exposure (CWE-200)2.7 Lowmagento/community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)4.3 Mediummagento/community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)6.5 Mediummagento/community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)2.7 Lowmagento/community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)4.3 Mediummagento/community-editionPackagistA user without ship permissions can ship the orders4.3 Mediummagento/community-editionPackagistStored XSS through Webhook module public key configuration7.6 Highmagento/community-editionPackagistAdobe Commerce | Improper Authorization (CWE-285)5.4 Mediummagento/community-editionPackagistAn unauthorized user can export the Invoiced Sales Report4.3 Mediummagento/community-editionPackagist[Paris] Path Traversal lead to local file read7.7 Highmagento/community-editionPackagistAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)4.3 Mediummagento/community-editionPackagistAn unauthorized user can export the Shipping Report4.3 Mediummagento/community-editionPackagistAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)4.3 Mediummagento/community-editionPackagistAdobe Commerce | Improper Authorization (CWE-285)4.3 Mediummagento/community-editionPackagistOTP 2FA can be bruteforced7.4 Highmagento/community-editionPackagistAdobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)8.4 Highmagento/community-editionPackagistAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)4.3 Mediummagento/community-editionPackagistAdobe Commerce | Improper Authorization (CWE-285)4.3 Mediummagento/community-editionPackagistUnauthorized user can export Orders Sale Report4.3 Mediummagento/community-editionPackagistBeing able to import/export tax rates without proper privileges4.3 Mediummagento/community-editionPackagistAdobe Commerce | Improper Authorization (CWE-285)4.3 Mediummagento/community-editionPackagistAdobe Commerce | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)8.4 Highmagento/community-editionPackagistAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)6.8 Mediummagento/community-editionPackagistA user without Shop Policy Parameters section privilege can alter the shop policy parameters section4.3 Mediummagento/community-editionPackagistDOM XSS through integrations can impact other admins8.1 Highmagento/community-editionPackagistAn unauthorized user can export the Tax Sales Report4.3 Mediummagento/community-editionPackagistAdobe Commerce | Improper Authorization (CWE-285)4.3 Mediummagento/community-editionPackagistInsecure Direct Object Reference - An attacker can able to erase the victim quote details5.3 Mediummagento/community-editionPackagistCustomer account takeover via web API call & subsequent password reset8.1 Highmagento/community-editionPackagistSSRF in service connector6.5 Mediummagento/community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)5.3 Mediummagento/community-editionPackagistStored Cross Site Scripting in Order Comment4.8 Mediummagento/community-editionPackagistAdobe Commerce | Improper Authorization (CWE-285)8.2 Highmagento/community-editionPackagistXXE can expose crypt key and other secrets granting full admin access9.8 Criticalmagento/community-editionPackagistMagento RCE,XSS and other vulnerabilitiesNo scoremagento/community-editionPackagistMagento Cross-Site Scripting (XSS) vulnerabilityNo scoremagento/community-editionPackagistMagento remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilitiesNo scoremagento/community-editionPackagistMagento Open Source Security Advisory: Patch SUPEE-10975No scoremagento/community-editionPackagistMagento Patch SUPEE-9652 - Remote Code Execution using mail vulnerabilityNo scoremagento/community-editionPackagistMagento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilitiesNo score- Show moreLoading…