Lucene search
GoogleOSV:CVE-2021-39864HistoryOct 15, 2021 - 3:15 p.m.
CVE-2021-39864
2021-10-1515:15:08
Google
osv.dev
7
adobe commerce
csrf vulnerability
wishlist share link
unauthorized addition
customer cart
unauthenticated attacker
admin console.
Adobe Commerce versions 2.4.2-p2 (and earlier), 2.4.3 (and earlier) and 2.3.7p1 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via a Wishlist Share Link. Successful exploitation could lead to unauthorized addition to customer cart by an unauthenticated attacker. Access to the admin console is not required for successful exploitation.
Related
cve
cve
CVE-2021-39864
2021-10-15 15:15:08
cnvd
cnvd
Adobe Magento Commerce Cross-Site Request Forgery Vulnerability
2021-11-12 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2021-39864
2021-10-15 15:15:08
prion
prion
Cross site request forgery (csrf)
2021-10-15 15:15:00
adobe
adobe
APSB21-86 Security update available for Adobe Commerce
2021-10-12 00:00:00