Magento versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper input validation vulnerability within the CMS page scheduled update feature. An authenticated attacker with administrative privilege could leverage this vulnerability to achieve remote code execution on the system.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/magento/apsb21-64.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
14 Sep 2023, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-20 |
11 Sep 2023, 19:05
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.2 |
| References | (MISC) https://helpx.adobe.com/security/products/magento/apsb21-64.html - Vendor Advisory | |
| First Time |
Magento magento
Magento |
|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:magento:magento:2.3.7:-:*:*:open_source:*:*:* cpe:2.3:a:magento:magento:2.3.7:-:*:*:commerce:*:*:* cpe:2.3:a:magento:magento:2.4.2:-:*:*:commerce:*:*:* cpe:2.3:a:magento:magento:2.4.2:-:*:*:open_source:*:*:* cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:* cpe:2.3:a:magento:magento:2.4.2:p1:*:*:open_source:*:*:* cpe:2.3:a:magento:magento:2.4.2:p1:*:*:commerce:*:*:* cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:* |
06 Sep 2023, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-09-06 14:15
Updated : 2023-12-10 15:14
NVD link : CVE-2021-36021
Mitre link : CVE-2021-36021
CVE.ORG link : CVE-2021-36021
JSON object : View
Products Affected
magento
- magento
CWE