Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

packagist

magento/community-edition

packagist

Magento 2 (Open Source)

View on github.com · View on packagist.org

High Security Advisories for magento/community-edition in packagist Clear Filters

High
about 2 months ago

Magento provides incorrect authorization through a security feature bypass GSA_kwCzR0hTQS02OXg5LXhwMmotdzhnOM4ABNa2

packagist magento/project-community-edition, magento/community-edition
High
about 2 months ago

Magento vulnerable to stored Cross-Site Scripting (XSS) GSA_kwCzR0hTQS0yNzY4LTV3bXYtY2ZmZs4ABNav

packagist magento/community-edition, magento/project-community-edition
High
4 months ago

Magento Cross-Site Request Forgery (CSRF) vulnerability GSA_kwCzR0hTQS01Nzc3LWpqN3AtbXBxd84ABK9E

packagist magento/community-edition, magento/project-community-edition
High
4 months ago

Magento vulnerable to denial of service GSA_kwCzR0hTQS14Z2ZtLTk5MnYtaDJocs4ABK-V

packagist magento/community-edition, magento/project-community-edition
High
4 months ago

Magento Cross-site Scripting vulnerability GSA_kwCzR0hTQS04bXE4LWMyNDMtMjMzNc4ABK9P

packagist magento/project-community-edition, magento/community-edition
High
4 months ago

Magento has incorrect authorization issue that leads to arbitrary file system read GSA_kwCzR0hTQS03aHJqLTNjOXgteHY1aM4ABK9L

packagist magento/community-edition, magento/project-community-edition
High
6 months ago

Magento Improper Authorization leading to security feature bypass GSA_kwCzR0hTQS1yNDg3LTl2djUtNzVnZ84ABI4K

packagist magento/community-edition, magento/project-community-edition
High
10 months ago

Magento stored Cross-Site Scripting (XSS) vulnerability GSA_kwCzR0hTQS04ODg0LTdybTktbXJ4NM4ABEWQ

packagist magento/project-community-edition, magento/community-edition
High
10 months ago

Magento Stored Cross-Site Scripting (XSS) Vulnerability GSA_kwCzR0hTQS1nYzI3LXJ2dm0tcTc3cs4ABEWR

packagist magento/project-community-edition, magento/community-edition
High
10 months ago

Magento Stored Cross-Site Scripting (XSS) Vulnerability GSA_kwCzR0hTQS1tNHJnLW1wcDItOTdweM4ABEV_

packagist magento/project-community-edition, magento/community-edition
High
10 months ago

Magento Improper Access Control vulnerability GSA_kwCzR0hTQS0zNmh3LXgzY2MtbTI1OM4ABEV2

packagist magento/project-community-edition, magento/community-edition
High
10 months ago

Adobe Commerce Path Traversal GSA_kwCzR0hTQS05NTRwLWZmNzItMzI3d84ABEWB

packagist magento/community-edition
High
10 months ago

Magento Stored Cross-Site Scripting (XSS) Vulnerability GSA_kwCzR0hTQS1nM2o2LTk3NTMtOG1wMs4ABEWP

packagist magento/project-community-edition, magento/community-edition
High
10 months ago

Adobe Commerce Improper Authorization vulnerability GSA_kwCzR0hTQS12dzQ3LTc5anYtMzU5OM4ABEV4

packagist magento/project-community-edition, magento/community-edition
High
10 months ago

Magento Stored Cross-Site Scripting (XSS) Vulnerability GSA_kwCzR0hTQS1nanhwLTQ2cnEtd2c0cc4ABEV5

packagist magento/project-community-edition, magento/community-edition
High
10 months ago

Magento Stored Cross-Site Scripting (XSS) Vulnerability GSA_kwCzR0hTQS14d2d4LTh2NzItNGo1as4ABEWT

packagist magento/project-community-edition, magento/community-edition
High
10 months ago

Magento Stored Cross-Site Scripting (XSS) Vulnerability GSA_kwCzR0hTQS1maHc2LTNtajUtdzlnds4ABEWL

packagist magento/project-community-edition, magento/community-edition
High
10 months ago

Magento Stored Cross-Site Scripting (XSS) Vulnerability GSA_kwCzR0hTQS1yamp3LWc2aHctN3BjOc4ABEWW

packagist magento/project-community-edition, magento/community-edition
High
about 1 year ago

Magento Open Source Improper Authorization vulnerability GSA_kwCzR0hTQS01ZjY0LXBwbWctY3Z2bc4ABALB

packagist magento/community-edition
High
about 1 year ago

Magento Open Source Improper Access Control vulnerability GSA_kwCzR0hTQS1jZzUyLTY4ZnYtOTRxcc4ABAKw

packagist magento/community-edition
High
over 1 year ago

Magento Stored Cross-Site Scripting (XSS) vulnerability GSA_kwCzR0hTQS1tbXA3LThjZzQtOXdyZ84AA-oZ

packagist magento/community-edition, magento/project-community-edition
High
over 1 year ago

Magento DOM-based Cross-Site Scripting (XSS) vulnerability GSA_kwCzR0hTQS01MmZnLXdqeG0tcHA0NM4AA-oV

packagist magento/community-edition, magento/project-community-edition
High
over 1 year ago

Magento Path Traversal vulnerability GSA_kwCzR0hTQS03cjk5LTh3cXAtaDdwY84AA-oR

packagist magento/community-edition, magento/project-community-edition
High
over 1 year ago

Magento OS Command ('OS Command Injection') vulnerability GSA_kwCzR0hTQS0yZmY2LTgzN2otaGc1eM4AA-oh

packagist magento/community-edition, magento/project-community-edition
High
over 1 year ago

Magento does not properly restrict excessive authentication attempts GSA_kwCzR0hTQS1xNjI4LTU0d2ctNHI1cc4AA-oY

packagist magento/community-edition, magento/project-community-edition
High
over 1 year ago

Magento OS Command ('OS Command Injection') vulnerability GSA_kwCzR0hTQS04ZnJwLXB4cTItM2dwcc4AA-oX

packagist magento/community-edition, magento/project-community-edition
High
over 1 year ago

Magento Open Source Improper Authorization vulnerability GSA_kwCzR0hTQS13d2ozLTU3M2otcnZ2bc4AA9Ba

packagist magento/community-edition
High
over 1 year ago

Magento Open Source allows Improper Input Validation GSA_kwCzR0hTQS13aDRtLTZyaDMtcDRycc4AA63V

packagist magento/project-community-edition, magento/community-edition
High
almost 2 years ago

Magento Open Source allows Cross-Site Scripting (XSS) GSA_kwCzR0hTQS0yNjRnLWY3djgtcTVxcc4AA5Ue

packagist magento/project-community-edition, magento/community-edition
High
almost 2 years ago

Magento Open Source allows OS Command Injection GSA_kwCzR0hTQS01MjVmLXB2ajUtdnFtcc4AA5Uh

packagist magento/project-community-edition, magento/community-edition
High
over 2 years ago

Magento Open Source allows Improper Neutralization of Special Elements Used GSA_kwCzR0hTQS1teGM5LWc2bTQtMnYzNc4AA1K5

packagist magento/project-community-edition, magento/community-edition
High
over 2 years ago

Magento Open Source allows Improper Neutralization of Special Elements Used GSA_kwCzR0hTQS1nZm1tLXd3NmYtNW1tNc4AAz49

packagist magento/project-community-edition, magento/community-edition
High
over 2 years ago

Magento Open Source allows XML Injection GSA_kwCzR0hTQS0yNDQ0LThnajgtNmZteM4AAyWb

packagist magento/project-community-edition, magento/community-edition
High
about 3 years ago

Magento Improper input validation vulnerability GSA_kwCzR0hTQS0yOTdmLXI5dzctdzQ5Ms4AAve8

packagist magento/community-edition
High
about 3 years ago

Magento Open Source allows Stored Cross-Site Scripting (Stored XSS) GSA_kwCzR0hTQS00dmoyLTQyNnItam0zZ84AAvWU

packagist magento/project-community-edition, magento/community-edition
High
over 3 years ago

Magento Path Traversal vulnerability GSA_kwCzR0hTQS1meDlnLWc5cTYteDNqeM4AAuCO

packagist magento/community-edition
High
over 3 years ago

Magento Improper Access Control vulnerability GSA_kwCzR0hTQS14OTV4LWY0ZzktbW04Nc4AAuDM

packagist magento/community-edition
High
over 3 years ago

Magento Improper Authorization vulnerability GSA_kwCzR0hTQS1yN21tLWdyZjMtNWZqds4AAuDW

packagist magento/community-edition
High
over 3 years ago

Magento remote code execution vulnerability GSA_kwCzR0hTQS00djJxLWhqeDMtYzR2cs4AAq98

packagist magento/community-edition
High
over 3 years ago

Magento XML Injection vulnerability in the 'City' field GSA_kwCzR0hTQS14dnB4LTZoaDgtN2g3Ms4AApvg

packagist magento/community-edition, magento/project-community-edition
High
over 3 years ago

Magento XML Injection vulnerability in the Widgets Update Layout GSA_kwCzR0hTQS0zeDl4LXZocWotY3YyN84AApvo

packagist magento/community-edition, magento/project-community-edition
High
over 3 years ago

Magento is affected by an improper input validation vulnerability GSA_kwCzR0hTQS01dnc4LXI1NXctZjRxNM4AApvV

packagist magento/community-edition, magento/project-community-edition
High
over 3 years ago

Magento improper authorization vulnerability GSA_kwCzR0hTQS1tOHd4LXdocHAtcTI4M84AApvi

packagist magento/community-edition, magento/project-community-edition
High
over 3 years ago

Magento Path Traversal vulnerability via the `theme[preview_image]` parameter GSA_kwCzR0hTQS03dzk1LXF3aGgtcTlwM84AApvQ

packagist magento/community-edition, magento/project-community-edition
High
over 3 years ago

Magento allows attackers to alter the price of items GSA_kwCzR0hTQS1yaGZmLTY1aHAtNTVyd84AApvT

packagist magento/community-edition, magento/project-community-edition
High
over 3 years ago

Magento is affected by an os command injection via the Data collection endpoint GSA_kwCzR0hTQS1xbXE2LWpwdmctajU0N84AApvj

packagist magento/community-edition, magento/project-community-edition
High
over 3 years ago

Magento affected by remote code execution via a file upload GSA_kwCzR0hTQS1qNDZoLXFqanYtY3hmas4AApvP

packagist magento/community-edition, magento/project-community-edition
High
over 3 years ago

Magento vulnerable to file upload attack GSA_kwCzR0hTQS1teDVtLWo1eHItamc4Y84AApvX

packagist magento/community-edition, magento/project-community-edition
High
over 3 years ago

Magento affected by a blind SSRF vulnerability in the bundled dotmailer extension GSA_kwCzR0hTQS0zNnhxLTd3OHcteHA2OM4AApvN

packagist magento/community-edition, magento/project-community-edition
High
over 3 years ago

Magento affected by a server-side denial-of-service using a GraphQL field GSA_kwCzR0hTQS13cjU3LTNoMmYtM3E5Nc4AApvO

packagist magento/community-edition, magento/project-community-edition
High
over 3 years ago

Magento Violation of Secure Design Principles vulnerability in RMA PDF filename formats GSA_kwCzR0hTQS03Z2g2LWY0amgtM2Nycc4AAo-E

packagist magento/community-edition
High
over 3 years ago

Magento stored cross-site scripting (XSS) in the customer address upload feature GSA_kwCzR0hTQS02OTg4LWc4OW0tMjd2Zs4AAniS

packagist magento/community-edition
High
over 3 years ago

Magento OS command injection via the customer attribute save controller GSA_kwCzR0hTQS13MnA0LTJjOGMtMmc3aM4AAniA

packagist magento/community-edition
High
over 3 years ago

Magento SQL Injection vulnerability GSA_kwCzR0hTQS1wZjZ3LTNwZnctZnh2d84AAml-

packagist magento/community-edition
High
over 3 years ago

Magento defense-in-depth security mitigation vulnerability GSA_kwCzR0hTQS13N3JoLTl3NXYtcndxas4AAlKh

packagist magento/core, magento/community-edition
High
over 3 years ago

Magento authorization bypass vulnerability GSA_kwCzR0hTQS04d203LWgycWgtZmY0Y84AAlKU

packagist magento/core, magento/community-edition
High
over 3 years ago

Magento Signature verification bypass GSA_kwCzR0hTQS1qMnI0LTJjcjYtaDNyM84AAlKd

packagist magento/core, magento/community-edition
High
over 3 years ago

Magento sql injection vulnerability GSA_kwCzR0hTQS1ycjU5LXBqd2otNmdyas4AAjce

packagist magento/core, magento/community-edition
High
over 3 years ago

Magento Server-Side Request Forgery (SSRF) GSA_kwCzR0hTQS1mNzNoLTIyNGMtNjJxcs4AAil7

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS1wNzgzLWdqNm0tOXI4OM4AAilu

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS00N2g2LWhmcHYtN3Boas4AAilz

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition SSRF vulnerability GSA_kwCzR0hTQS03NzV3LWd4M2YtNGo0Zs4AAilr

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS05d3I5LWZ3OXYtOGZncs4AAilo

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS1qcmp4LThnbXctamoycc4AAimQ

packagist magento/community-edition
High
over 3 years ago

Magento SQL injection via marketing account with access to email templates variables GSA_kwCzR0hTQS00NWdqLTc4aGMtNG12Y84AAimR

packagist magento/community-edition
High
over 3 years ago

Magento SQL injection vulnerability GSA_kwCzR0hTQS14NDJnLTgycHAtNHY2Z84AAilf

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS01djVwLXg4YzItbXF4cM4AAimS

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS1qNjN2LXdjZjktYzlobc4AAilR

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition SQLi Vulnerability GSA_kwCzR0hTQS0yeDJxLTJ4cHYtbWNmOc4AAimP

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability via CSRF GSA_kwCzR0hTQS14NzJtLXA0cWMtcDdyds4AAilY

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS1nZmNxLXdoM2ctYzZoNM4AAilE

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS0yY3JjLTV2cTYtMzg2cs4AAilI

packagist magento/community-edition
High
over 3 years ago

Magento Information Disclosure via File upload functionality GSA_kwCzR0hTQS0zMng1LTZwNHEtcThqaM4AAilG

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition Security Bypass GSA_kwCzR0hTQS1wOXZmLTRqeDItNWhwcM4AAilZ

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS1jcnY3LXIzNTctZ3czd84AAila

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition Information Leak GSA_kwCzR0hTQS01ajI1LTVoanItdzdtMs4AAhlb

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition Access Control Bypass GSA_kwCzR0hTQS0yZmhyLWY2cTYtYzRwMs4AAhlq

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS05Njl2LW13cDMtNG1yM84AAhlN

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE GSA_kwCzR0hTQS12dmY5LWZ4aHYtNHJnas4AAhlY

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Unrestricted File Upload GSA_kwCzR0hTQS0zaDY5LTRmcnctZzJqbc4AAhlZ

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition DoS vulnerability GSA_kwCzR0hTQS1ocmczLTRxNTYtcDJxNc4AAhlB

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition SSRF vulnerability GSA_kwCzR0hTQS1odmNwLWp2eDUtNHBtcM4AAhlI

packagist magento/community-edition
High
over 3 years ago

Magento Filter extension bypass via crafted store configuration keys GSA_kwCzR0hTQS1mOGg5LTdycHEtN3FjY84AAhk2

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition SSRF vulnerability GSA_kwCzR0hTQS1ocHBjLXJwZnAtcjhxd84AAhlK

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition Server-Side Request Forgery vulnerability GSA_kwCzR0hTQS0zM2NqLXc3NWYtNDltMs4AAhlE

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition DoS vulnerability GSA_kwCzR0hTQS1wcnc4LWdxd3AtZjdmaM4AAhlP

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS0yeDU1LW1nOXItMjRmN84AAhk-

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS1tdzV3LWNmNzYtNzNtOM4AAhkx

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability via SSRF GSA_kwCzR0hTQS13M3I4LWZ4djUtNThwcM4AAhk5

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS1qaHZoLW1qZmctNW05Oc4AAhk3

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition IDOR Vulnerability GSA_kwCzR0hTQS0zcGdjLTdqZjMtNXg1Z84AAhk4

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS1tcDlyLXJoOTUtZjhmOM4AAhkz

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition Cryptographic Flaw GSA_kwCzR0hTQS1jMmdnLXJyaGMtZnZ2Z84AAhk6

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition Unsafe File Upload GSA_kwCzR0hTQS12NTI3LTZoNXItY2ZnOM4AAhkl

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition RCE Vulnerability GSA_kwCzR0hTQS02cWg2LXY5OWgtdmg0Y84AAhkn

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition Path Traversal Vulnerability GSA_kwCzR0hTQS1ocWhmLThqZ2MtaDVoeM4AAhkL

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition Unsafe File Upload GSA_kwCzR0hTQS1qODM3LXZtNnctNnFjds4AAhkb

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition Cryptographic Flaw GSA_kwCzR0hTQS03aDh2LWYyZzktMzlmeM4AAhki

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition CSRF Vulnerability GSA_kwCzR0hTQS13bXJnLXc5dmctN2pxeM4AAhkY

packagist magento/community-edition
High
over 3 years ago

Magento 2 Community Edition Weak PRNG GSA_kwCzR0hTQS04djloLW03cGotaHg3Y84AAhkU

packagist magento/community-edition

Filter by Severity

Moderate 193 High 104 Critical 47 Low 17