Magento.Com
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:magento.com:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Magento.Com (43cabad1-1b23-5e86-ae56-a87034f89c6d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-21031 |
vulnerable | 2026-06-08 05:29:11.212402 |
Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access
MEDIUM (5.6)
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation.
Published: 2021-02-11T19:28:06.757Z
Updated: 2024-09-16T20:11:40.639Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.