Lucene search
GoogleOSV:CVE-2021-36024HistorySep 01, 2021 - 3:15 p.m.
CVE-2021-36024
2021-09-0115:15:09
Google
osv.dev
12
magento commerce
vulnerability
remote code execution
data collection
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an Improper Neutralization of Special Elements Used In A Command via the Data collection endpoint. An attacker with admin privileges can upload a specially crafted file to achieve remote code execution.
Related
nvd
nvd
CVE-2021-36024
2021-09-01 15:15:09
cve
cve
CVE-2021-36024
2021-09-01 15:15:09
cnvd
cnvd
Adobe Magento Input Validation Error Vulnerability (CNVD-2021-102805)
2021-08-11 00:00:00
prion
prion
Remote code execution
2021-09-01 15:15:00
cvelist
cvelist
thn
thn
Magento Update Released to Fix Critical Flaws Affecting E-Commerce Sites
2021-08-11 06:28:00
adobe
adobe
APSB21-64 Security updates available for Magento
2021-08-10 00:00:00