Magento 2.4.2 Commerce Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:magento:magento:2.4.2:*:*:*:commerce:*:*:*
part: a version: 2.4.2 update: *
| Vendor | Magento (aa019b60-1c50-5218-ad20-1f4a9a786d94) |
|---|---|
| Product | Magento (6f0f93c5-be7a-5b05-986f-1521453ea442) |
| Edition | * |
| Language | * |
| Software edition | commerce |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/firegento/magento |
purl2cpe | 2026-06-01 10:18:21.522858 |
pkg:magento/project-community-edition |
purl2cpe | 2026-06-01 10:18:21.522860 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-28585 |
vulnerable | 2026-06-08 05:31:24.605341 |
Magento Commerce improper input validation in customer customer webapi
MEDIUM (5.3)
Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper input validation vulnerability in the New customer WebAPI.Successful exploitation could allow an attacker to send unsolicited spam e-mails.
Published: 2021-06-28T13:47:54.410Z
Updated: 2024-09-16T17:19:04.822Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28584 |
vulnerable | 2026-06-08 05:31:24.604227 |
Magento Commerce path traversal vulnerability in child theme store creation
MEDIUM (5.4)
Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Path Traversal vulnerability when creating a store with child theme.Successful exploitation could lead to arbitrary file system write by an authenticated attacker. Access to the admin console is required for successful exploitation.
Published: 2021-06-28T13:49:14.173Z
Updated: 2024-09-16T17:43:34.490Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28583 |
vulnerable | 2026-06-08 05:31:24.602591 |
Magento Commerce insecure storage of sensitive documentation
HIGH (7.5)
Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Violation of Secure Design Principles vulnerability in RMA PDF filename formats. Successful exploitation could allow an attacker to get unauthorized access to restricted resources.
Published: 2021-06-28T13:47:40.431Z
Updated: 2024-09-17T03:28:26.746Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.