CVE-2021-36030

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter the price of items.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:adobe:adobe_commerce:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:adobe_commerce:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:adobe_commerce:2.4.2:p1:*:*:*:*:*:*
cpe:2.3:a:adobe:magento_open_source:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:magento_open_source:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:magento_open_source:2.4.2:p1:*:*:*:*:*:*

History

21 Nov 2024, 06:12

Type Values Removed Values Added
References () https://helpx.adobe.com/security/products/magento/apsb21-64.html - Patch, Vendor Advisory () https://helpx.adobe.com/security/products/magento/apsb21-64.html - Patch, Vendor Advisory

08 Sep 2021, 21:21

Type Values Removed Values Added
References (MISC) https://helpx.adobe.com/security/products/magento/apsb21-64.html - (MISC) https://helpx.adobe.com/security/products/magento/apsb21-64.html - Patch, Vendor Advisory
CPE cpe:2.3:a:adobe:adobe_commerce:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:magento_open_source:2.4.2:p1:*:*:*:*:*:*
cpe:2.3:a:adobe:magento_open_source:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:adobe_commerce:2.4.2:p1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5

01 Sep 2021, 15:19

Type Values Removed Values Added
New CVE

Information

Published : 2021-09-01 15:15

Updated : 2024-11-21 06:12


NVD link : CVE-2021-36030

Mitre link : CVE-2021-36030

CVE.ORG link : CVE-2021-36030


JSON object : View

Products Affected

adobe

  • magento_open_source
  • adobe_commerce
CWE
CWE-20

Improper Input Validation