Magento Magento 2.4.3 Patch 1 Open Source Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:magento:magento:2.4.3:p1:*:*:open_source:*:*:*
part: a version: 2.4.3 update: p1
| Vendor | Magento (aa019b60-1c50-5218-ad20-1f4a9a786d94) |
|---|---|
| Product | Magento (6f0f93c5-be7a-5b05-986f-1521453ea442) |
| Edition | * |
| Language | * |
| Software edition | open_source |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/firegento/magento |
purl2cpe | 2026-06-01 10:18:21.522889 |
pkg:magento/project-community-edition |
purl2cpe | 2026-06-01 10:18:21.522891 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-42344 |
vulnerable | 2026-06-08 05:49:29.818904 |
[CVE-2021-36032] Magento IDOR Leads to Account Takeover
HIGH (8.8)
Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and privilege escalation.
Published: 2022-10-20T16:28:18.473Z
Updated: 2024-09-16T16:28:52.349Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.