Lucene search
GoogleOSV:CVE-2020-24403HistoryNov 09, 2020 - 1:15 a.m.
CVE-2020-24403
2020-11-0901:15:12
Google
osv.dev
10
magento
vulnerability
user permissions
inventory component
rest api
Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect user permissions vulnerability within the Inventory component. This vulnerability could be abused by authenticated users with Inventory and Source permissions to make unauthorized changes to inventory source data via the REST API.
Related
nvd
nvd
CVE-2020-24403
2020-11-09 01:15:12
osv
osv
BIT-magento-2020-24403
2024-03-06 11:08:04
prion
prion
Spoofing
2020-11-09 01:15:00
cvelist
cvelist
cve
cve
CVE-2020-24403
2020-11-09 01:15:12
github
github
threatpost
threatpost
Critical Magento Holes Open Online Shops to Code Execution
2020-10-15 20:59:30
openvas
openvas
Magento < 2.3.6, 2.4.x < 2.4.1 Multiple Vulnerabilities (APSB20-59)
2020-10-23 00:00:00
adobe
adobe
APSB20-59 Security updates available for Magento
2020-10-15 00:00:00