magento/project-community-edition vulnerabilities (Packagist)
161 vulnerabilities.
magento/project-community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)6.5 Mediummagento/project-community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)4.8 Mediummagento/project-community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)8.1 Highmagento/project-community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)5.9 Mediummagento/project-community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.1 Highmagento/project-community-editionPackagistAdobe Commerce | Improper Input Validation (CWE-20)9.1 Criticalmagento/project-community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)7.5 Highmagento/project-community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 Highmagento/project-community-editionPackagistAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)5.9 Mediummagento/project-community-editionPackagistAdobe Commerce | Improper Input Validation (CWE-20)7.5 Highmagento/project-community-editionPackagistAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)5.3 Mediummagento/project-community-editionPackagistAdobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)8.1 Highmagento/project-community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)4.3 Mediummagento/project-community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)2.7 Lowmagento/project-community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)5.3 Mediummagento/project-community-editionPackagistAdobe Commerce | Improper Authorization (CWE-285)8.2 Highmagento/project-community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)5.3 Mediummagento/project-community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)5.3 Mediummagento/project-community-editionPackagistAdobe Commerce | Insufficiently Protected Credentials (CWE-522)2.7 Lowmagento/project-community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 Highmagento/project-community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)5.4 Mediummagento/project-community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)9.1 Criticalmagento/project-community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 Highmagento/project-community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)8.1 Highmagento/project-community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 Highmagento/project-community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 Highmagento/project-community-editionPackagistAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)3.7 Lowmagento/project-community-editionPackagistAdobe Commerce | Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)3.7 Lowmagento/project-community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)6.5 Mediummagento/project-community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)3.5 Lowmagento/project-community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)4.3 Mediummagento/project-community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 Highmagento/project-community-editionPackagistAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)7.5 Highmagento/project-community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 Highmagento/project-community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)8.2 Highmagento/project-community-editionPackagistAdobe Commerce | Business Logic Errors (CWE-840)5.3 Mediummagento/project-community-editionPackagistAdobe Commerce | Incorrect Authorization (CWE-863)4.3 Mediummagento/project-community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 Highmagento/project-community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)6.5 Mediummagento/project-community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)5.4 Mediummagento/project-community-editionPackagistAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)8.7 Highmagento/project-community-editionPackagistAdobe Commerce | Information Exposure (CWE-200)6.5 Mediummagento/project-community-editionPackagistAdobe Commerce | Improper Access Control (CWE-284)4.3 Mediummagento/project-community-editionPackagistA user without ship permissions can ship the orders4.3 Mediummagento/project-community-editionPackagistStored XSS through Webhook module public key configuration7.6 Highmagento/project-community-editionPackagistAdobe Commerce | Improper Authorization (CWE-285)5.4 Mediummagento/project-community-editionPackagistAn unauthorized user can export the Invoiced Sales Report4.3 Mediummagento/project-community-editionPackagist[Paris] Path Traversal lead to local file read7.7 Highmagento/project-community-editionPackagistAn unauthorized user can export the Shipping Report4.3 Mediummagento/project-community-editionPackagistAdobe Commerce | Improper Authorization (CWE-285)4.3 Medium- Show olderLoading…