magento/community-edition (Packagist)
Advisories
1000
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 2.4.9-alpha3 or later clears every advisory below that has a fix.
Upgrade commands
composer
composer require magento/community-edition:^2.4.9-alpha3Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-qvwr-p3hj-j6jf Magento vulnerable to privilege escalation due to incorrect authorization |
Medium EPSS 0.43% |
>= 2.4.9-alpha1, < 2.4.9-alpha3 | 2.4.9-alpha3 |
| GHSA-qvwr-p3hj-j6jf Magento vulnerable to privilege escalation due to incorrect authorization |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-qvwr-p3hj-j6jf Magento vulnerable to privilege escalation due to incorrect authorization |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-qvwr-p3hj-j6jf Magento vulnerable to privilege escalation due to incorrect authorization |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-qvwr-p3hj-j6jf Magento vulnerable to privilege escalation due to incorrect authorization |
Medium EPSS 0.43% |
< 2.4.6-p13 | 2.4.6-p13 |
| GHSA-qvwr-p3hj-j6jf Magento vulnerable to privilege escalation due to incorrect authorization |
Medium EPSS 0.43% |
>= 2.4.7-beta1, < 2.4.7-p8 | 2.4.7-p8 |
| GHSA-qvwr-p3hj-j6jf Magento vulnerable to privilege escalation due to incorrect authorization |
Medium EPSS 0.43% |
>= 2.4.8-beta1, < 2.4.8-p3 | 2.4.8-p3 |
| GHSA-pcrx-r49h-x2w5 Magento vulnerable to stored Cross-Site Scripting (XSS) |
Medium EPSS 0.27% |
>= 2.4.8-beta1, < 2.4.8-p3 | 2.4.8-p3 |
| GHSA-pcrx-r49h-x2w5 Magento vulnerable to stored Cross-Site Scripting (XSS) |
Medium EPSS 0.27% |
No fix yet | |
| GHSA-pcrx-r49h-x2w5 Magento vulnerable to stored Cross-Site Scripting (XSS) |
Medium EPSS 0.27% |
No fix yet | |
| GHSA-pcrx-r49h-x2w5 Magento vulnerable to stored Cross-Site Scripting (XSS) |
Medium EPSS 0.27% |
No fix yet | |
| GHSA-pcrx-r49h-x2w5 Magento vulnerable to stored Cross-Site Scripting (XSS) |
Medium EPSS 0.27% |
< 2.4.6-p13 | 2.4.6-p13 |
| GHSA-pcrx-r49h-x2w5 Magento vulnerable to stored Cross-Site Scripting (XSS) |
Medium EPSS 0.27% |
>= 2.4.7-beta1, < 2.4.7-p8 | 2.4.7-p8 |
| GHSA-pcrx-r49h-x2w5 Magento vulnerable to stored Cross-Site Scripting (XSS) |
Medium EPSS 0.27% |
>= 2.4.9-alpha1, < 2.4.9-alpha3 | 2.4.9-alpha3 |
| GHSA-r355-75hw-r8jf Magento allows incorrect authorization |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-r355-75hw-r8jf Magento allows incorrect authorization |
Medium EPSS 0.55% |
>= 2.4.9-alpha1, < 2.4.9-alpha3 | 2.4.9-alpha3 |
| GHSA-r355-75hw-r8jf Magento allows incorrect authorization |
Medium EPSS 0.55% |
>= 2.4.8-beta1, < 2.4.8-p3 | 2.4.8-p3 |
| GHSA-r355-75hw-r8jf Magento allows incorrect authorization |
Medium EPSS 0.55% |
>= 2.4.7-beta1, < 2.4.7-p8 | 2.4.7-p8 |
| GHSA-r355-75hw-r8jf Magento allows incorrect authorization |
Medium EPSS 0.55% |
< 2.4.6-p13 | 2.4.6-p13 |
| GHSA-r355-75hw-r8jf Magento allows incorrect authorization |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-r355-75hw-r8jf Magento allows incorrect authorization |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-2768-5wmv-cfff Magento vulnerable to stored Cross-Site Scripting (XSS) |
High EPSS 0.60% |
>= 2.4.9-alpha1, < 2.4.9-alpha3 | 2.4.9-alpha3 |
| GHSA-2768-5wmv-cfff Magento vulnerable to stored Cross-Site Scripting (XSS) |
High EPSS 0.60% |
>= 2.4.8-beta1, < 2.4.8-p3 | 2.4.8-p3 |
| GHSA-2768-5wmv-cfff Magento vulnerable to stored Cross-Site Scripting (XSS) |
High EPSS 0.60% |
>= 2.4.7-beta1, < 2.4.7-p8 | 2.4.7-p8 |
| GHSA-2768-5wmv-cfff Magento vulnerable to stored Cross-Site Scripting (XSS) |
High EPSS 0.60% |
< 2.4.6-p13 | 2.4.6-p13 |
| GHSA-2768-5wmv-cfff Magento vulnerable to stored Cross-Site Scripting (XSS) |
High EPSS 0.60% |
No fix yet | |
| GHSA-2768-5wmv-cfff Magento vulnerable to stored Cross-Site Scripting (XSS) |
High EPSS 0.60% |
No fix yet | |
| GHSA-2768-5wmv-cfff Magento vulnerable to stored Cross-Site Scripting (XSS) |
High EPSS 0.60% |
No fix yet | |
| GHSA-69x9-xp2j-w8g8 Magento provides incorrect authorization through a security feature bypass |
High EPSS 0.60% |
>= 2.4.9-alpha1, < 2.4.9-alpha3 | 2.4.9-alpha3 |
| GHSA-69x9-xp2j-w8g8 Magento provides incorrect authorization through a security feature bypass |
High EPSS 0.60% |
>= 2.4.8-beta1, < 2.4.8-p3 | 2.4.8-p3 |
| GHSA-69x9-xp2j-w8g8 Magento provides incorrect authorization through a security feature bypass |
High EPSS 0.60% |
No fix yet | |
| GHSA-69x9-xp2j-w8g8 Magento provides incorrect authorization through a security feature bypass |
High EPSS 0.60% |
No fix yet | |
| GHSA-69x9-xp2j-w8g8 Magento provides incorrect authorization through a security feature bypass |
High EPSS 0.60% |
No fix yet | |
| GHSA-69x9-xp2j-w8g8 Magento provides incorrect authorization through a security feature bypass |
High EPSS 0.60% |
< 2.4.6-p13 | 2.4.6-p13 |
| GHSA-69x9-xp2j-w8g8 Magento provides incorrect authorization through a security feature bypass |
High EPSS 0.60% |
>= 2.4.7-beta1, < 2.4.7-p8 | 2.4.7-p8 |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
No fix yet | |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
No fix yet | |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
>= 2.4.8-beta1, <= 2.4.8-p2 | No fix yet |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
>= 2.4.7-beta1, <= 2.4.7-p7 | No fix yet |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
No fix yet | |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
No fix yet | |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
>= 2.4.9-alpha1, <= 2.4.9-alpha2 | No fix yet |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
No fix yet | |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
>= 2.4.6-p1, <= 2.4.6-p12 | No fix yet |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
No fix yet | |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
<= 2.4.5-p14 | No fix yet |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
No fix yet | |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
>= 2.4.8-beta1, <= 2.4.8-p2 | No fix yet |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
>= 2.4.7-beta1, <= 2.4.7-p7 | No fix yet |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
No fix yet | |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
>= 2.4.9-alpha1, <= 2.4.9-alpha2 | No fix yet |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
No fix yet | |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
>= 2.4.6-p1, <= 2.4.6-p12 | No fix yet |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
No fix yet | |
| GHSA-wh92-6q6g-px7j Magento Community Edition Improper Input Validation vulnerability Known exploited |
Critical EPSS 95.35% |
<= 2.4.5-p14 | No fix yet |
| GHSA-h4f4-gv6h-x824 Magento vulnerable to path traversal |
Medium EPSS 0.66% |
No fix yet | |
| GHSA-h4f4-gv6h-x824 Magento vulnerable to path traversal |
Medium EPSS 0.66% |
No fix yet | |
| GHSA-h4f4-gv6h-x824 Magento vulnerable to path traversal |
Medium EPSS 0.66% |
No fix yet | |
| GHSA-h4f4-gv6h-x824 Magento vulnerable to path traversal |
Medium EPSS 0.66% |
No fix yet | |
| GHSA-h4f4-gv6h-x824 Magento vulnerable to path traversal |
Medium EPSS 0.66% |
< 2.4.5-p14 | 2.4.5-p14 |
| GHSA-h4f4-gv6h-x824 Magento vulnerable to path traversal |
Medium EPSS 0.66% |
>= 2.4.6-p1, < 2.4.6-p12 | 2.4.6-p12 |
| GHSA-h4f4-gv6h-x824 Magento vulnerable to path traversal |
Medium EPSS 0.66% |
>= 2.4.7-beta1, < 2.4.7-p7 | 2.4.7-p7 |
| GHSA-h4f4-gv6h-x824 Magento vulnerable to path traversal |
Medium EPSS 0.66% |
>= 2.4.8-beta1, < 2.4.8-p2 | 2.4.8-p2 |
| GHSA-h4f4-gv6h-x824 Magento vulnerable to path traversal |
Medium EPSS 0.66% |
>= 2.4.9-alpha1, < 2.4.9-alpha2 | 2.4.9-alpha2 |
| GHSA-wcmw-8xpp-rwfj Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Medium EPSS 0.40% |
No fix yet | |
| GHSA-wcmw-8xpp-rwfj Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Medium EPSS 0.40% |
No fix yet | |
| GHSA-wcmw-8xpp-rwfj Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Medium EPSS 0.40% |
No fix yet | |
| GHSA-wcmw-8xpp-rwfj Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Medium EPSS 0.40% |
No fix yet | |
| GHSA-wcmw-8xpp-rwfj Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Medium EPSS 0.40% |
< 2.4.5-p14 | 2.4.5-p14 |
| GHSA-wcmw-8xpp-rwfj Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Medium EPSS 0.40% |
>= 2.4.6-p1, < 2.4.6-p12 | 2.4.6-p12 |
| GHSA-wcmw-8xpp-rwfj Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Medium EPSS 0.40% |
>= 2.4.7-beta1, < 2.4.7-p7 | 2.4.7-p7 |
| GHSA-wcmw-8xpp-rwfj Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Medium EPSS 0.40% |
>= 2.4.8-beta1, < 2.4.8-p2 | 2.4.8-p2 |
| GHSA-wcmw-8xpp-rwfj Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Medium EPSS 0.40% |
>= 2.4.9-alpha1, < 2.4.9-alpha2 | 2.4.9-alpha2 |
| GHSA-8mq8-c243-2335 Magento Cross-site Scripting vulnerability |
High EPSS 0.64% |
No fix yet | |
| GHSA-8mq8-c243-2335 Magento Cross-site Scripting vulnerability |
High EPSS 0.64% |
>= 2.4.7-p1, < 2.4.7-p7 | 2.4.7-p7 |
| GHSA-8mq8-c243-2335 Magento Cross-site Scripting vulnerability |
High EPSS 0.64% |
>= 2.4.6-p1, < 2.4.6-p12 | 2.4.6-p12 |
| GHSA-8mq8-c243-2335 Magento Cross-site Scripting vulnerability |
High EPSS 0.64% |
>= 2.4.5-p1, < 2.4.5-p14 | 2.4.5-p14 |
| GHSA-8mq8-c243-2335 Magento Cross-site Scripting vulnerability |
High EPSS 0.64% |
< 2.4.4-p15 | 2.4.4-p15 |
| GHSA-7hrj-3c9x-xv5h Magento has incorrect authorization issue that leads to arbitrary file system read |
High EPSS 0.60% |
>= 2.4.8-beta1, < 2.4.8-p2 | 2.4.8-p2 |
| GHSA-7hrj-3c9x-xv5h Magento has incorrect authorization issue that leads to arbitrary file system read |
High EPSS 0.60% |
>= 2.4.9-alpha1, < 2.4.9-alpha2 | 2.4.9-alpha2 |
| GHSA-7hrj-3c9x-xv5h Magento has incorrect authorization issue that leads to arbitrary file system read |
High EPSS 0.60% |
>= 2.4.7-beta1, < 2.4.7-p7 | 2.4.7-p7 |
| GHSA-7hrj-3c9x-xv5h Magento has incorrect authorization issue that leads to arbitrary file system read |
High EPSS 0.60% |
>= 2.4.6-p1, < 2.4.6-p12 | 2.4.6-p12 |
| GHSA-7hrj-3c9x-xv5h Magento has incorrect authorization issue that leads to arbitrary file system read |
High EPSS 0.60% |
< 2.4.5-p14 | 2.4.5-p14 |
| GHSA-7hrj-3c9x-xv5h Magento has incorrect authorization issue that leads to arbitrary file system read |
High EPSS 0.60% |
No fix yet | |
| GHSA-7hrj-3c9x-xv5h Magento has incorrect authorization issue that leads to arbitrary file system read |
High EPSS 0.60% |
No fix yet | |
| GHSA-7hrj-3c9x-xv5h Magento has incorrect authorization issue that leads to arbitrary file system read |
High EPSS 0.60% |
No fix yet | |
| GHSA-7hrj-3c9x-xv5h Magento has incorrect authorization issue that leads to arbitrary file system read |
High EPSS 0.60% |
No fix yet | |
| GHSA-5777-jj7p-mpqw Magento Cross-Site Request Forgery (CSRF) vulnerability |
High EPSS 0.88% |
>= 2.4.8-beta1, < 2.4.8-p2 | 2.4.8-p2 |
| GHSA-5777-jj7p-mpqw Magento Cross-Site Request Forgery (CSRF) vulnerability |
High EPSS 0.88% |
>= 2.4.9-alpha1, < 2.4.9-alpha2 | 2.4.9-alpha2 |
| GHSA-5777-jj7p-mpqw Magento Cross-Site Request Forgery (CSRF) vulnerability |
High EPSS 0.88% |
No fix yet | |
| GHSA-5777-jj7p-mpqw Magento Cross-Site Request Forgery (CSRF) vulnerability |
High EPSS 0.88% |
No fix yet | |
| GHSA-5777-jj7p-mpqw Magento Cross-Site Request Forgery (CSRF) vulnerability |
High EPSS 0.88% |
No fix yet | |
| GHSA-5777-jj7p-mpqw Magento Cross-Site Request Forgery (CSRF) vulnerability |
High EPSS 0.88% |
No fix yet | |
| GHSA-5777-jj7p-mpqw Magento Cross-Site Request Forgery (CSRF) vulnerability |
High EPSS 0.88% |
< 2.4.5-p14 | 2.4.5-p14 |
| GHSA-5777-jj7p-mpqw Magento Cross-Site Request Forgery (CSRF) vulnerability |
High EPSS 0.88% |
>= 2.4.6-p1, < 2.4.6-p12 | 2.4.6-p12 |
| GHSA-5777-jj7p-mpqw Magento Cross-Site Request Forgery (CSRF) vulnerability |
High EPSS 0.88% |
>= 2.4.7-beta1, < 2.4.7-p7 | 2.4.7-p7 |
| GHSA-xgfm-992v-h2hr Magento vulnerable to denial of service |
High EPSS 0.56% |
>= 2.4.9-alpha1, < 2.4.9-alpha2 | 2.4.9-alpha2 |
| GHSA-xgfm-992v-h2hr Magento vulnerable to denial of service |
High EPSS 0.56% |
>= 2.4.6-p1, < 2.4.6-p12 | 2.4.6-p12 |
| GHSA-xgfm-992v-h2hr Magento vulnerable to denial of service |
High EPSS 0.56% |
< 2.4.5-p14 | 2.4.5-p14 |
| GHSA-xgfm-992v-h2hr Magento vulnerable to denial of service |
High EPSS 0.56% |
No fix yet | |
| GHSA-xgfm-992v-h2hr Magento vulnerable to denial of service |
High EPSS 0.56% |
No fix yet | |
| GHSA-xgfm-992v-h2hr Magento vulnerable to denial of service |
High EPSS 0.56% |
No fix yet | |
| GHSA-xgfm-992v-h2hr Magento vulnerable to denial of service |
High EPSS 0.56% |
>= 2.4.8-beta1, < 2.4.8-p2 | 2.4.8-p2 |
| GHSA-xgfm-992v-h2hr Magento vulnerable to denial of service |
High EPSS 0.56% |
No fix yet | |
| GHSA-xgfm-992v-h2hr Magento vulnerable to denial of service |
High EPSS 0.56% |
>= 2.4.7-beta1, < 2.4.7-p7 | 2.4.7-p7 |
| GHSA-8hcx-xvww-6c6h Magento Security feature bypass |
Medium EPSS 0.37% |
>= 2.4.7-beta1, < 2.4.7-p6 | 2.4.7-p6 |
| GHSA-8hcx-xvww-6c6h Magento Security feature bypass |
Medium EPSS 0.37% |
>= 2.4.6-p1, < 2.4.6-p11 | 2.4.6-p11 |
| GHSA-8hcx-xvww-6c6h Magento Security feature bypass |
Medium EPSS 0.37% |
< 2.4.5-p13 | 2.4.5-p13 |
| GHSA-8hcx-xvww-6c6h Magento Security feature bypass |
Medium EPSS 0.37% |
No fix yet | |
| GHSA-8hcx-xvww-6c6h Magento Security feature bypass |
Medium EPSS 0.37% |
No fix yet | |
| GHSA-8hcx-xvww-6c6h Magento Security feature bypass |
Medium EPSS 0.37% |
No fix yet | |
| GHSA-8hcx-xvww-6c6h Magento Security feature bypass |
Medium EPSS 0.37% |
No fix yet | |
| GHSA-85jx-x9r4-45m2 Magento Authenticated Security feature bypass |
Low EPSS 0.39% |
< 2.4.5-p13 | 2.4.5-p13 |
| GHSA-85jx-x9r4-45m2 Magento Authenticated Security feature bypass |
Low EPSS 0.39% |
No fix yet | |
| GHSA-85jx-x9r4-45m2 Magento Authenticated Security feature bypass |
Low EPSS 0.39% |
No fix yet | |
| GHSA-85jx-x9r4-45m2 Magento Authenticated Security feature bypass |
Low EPSS 0.39% |
No fix yet | |
| GHSA-85jx-x9r4-45m2 Magento Authenticated Security feature bypass |
Low EPSS 0.39% |
No fix yet | |
| GHSA-85jx-x9r4-45m2 Magento Authenticated Security feature bypass |
Low EPSS 0.39% |
>= 2.4.6-p1, < 2.4.6-p11 | 2.4.6-p11 |
| GHSA-85jx-x9r4-45m2 Magento Authenticated Security feature bypass |
Low EPSS 0.39% |
>= 2.4.7-beta1, < 2.4.7-p6 | 2.4.7-p6 |
| GHSA-j934-vjh5-vf9r Magneto contains stored XSS vulnerability |
High EPSS 0.73% |
>= 2.4.6-p1, < 2.4.6-p11 | 2.4.6-p11 |
| GHSA-j934-vjh5-vf9r Magneto contains stored XSS vulnerability |
High EPSS 0.73% |
>= 2.4.8-beta1, < 2.4.8-p1 | 2.4.8-p1 |
| GHSA-j934-vjh5-vf9r Magneto contains stored XSS vulnerability |
High EPSS 0.73% |
>= 2.4.7-beta1, < 2.4.7-p6 | 2.4.7-p6 |
| GHSA-j934-vjh5-vf9r Magneto contains stored XSS vulnerability |
High EPSS 0.73% |
No fix yet | |
| GHSA-j934-vjh5-vf9r Magneto contains stored XSS vulnerability |
High EPSS 0.73% |
< 2.4.5-p13 | 2.4.5-p13 |
| GHSA-j934-vjh5-vf9r Magneto contains stored XSS vulnerability |
High EPSS 0.73% |
No fix yet | |
| GHSA-j934-vjh5-vf9r Magneto contains stored XSS vulnerability |
High EPSS 0.73% |
No fix yet | |
| GHSA-j934-vjh5-vf9r Magneto contains stored XSS vulnerability |
High EPSS 0.73% |
No fix yet | |
| GHSA-r487-9vv5-75gg Magento Improper Authorization leading to security feature bypass |
High EPSS 0.53% |
>= 2.4.7-beta1, < 2.4.7-p6 | 2.4.7-p6 |
| GHSA-r487-9vv5-75gg Magento Improper Authorization leading to security feature bypass |
High EPSS 0.53% |
>= 2.4.6-p1, < 2.4.6-p11 | 2.4.6-p11 |
| GHSA-r487-9vv5-75gg Magento Improper Authorization leading to security feature bypass |
High EPSS 0.53% |
< 2.4.5-p13 | 2.4.5-p13 |
| GHSA-r487-9vv5-75gg Magento Improper Authorization leading to security feature bypass |
High EPSS 0.53% |
No fix yet | |
| GHSA-r487-9vv5-75gg Magento Improper Authorization leading to security feature bypass |
High EPSS 0.53% |
No fix yet | |
| GHSA-r487-9vv5-75gg Magento Improper Authorization leading to security feature bypass |
High EPSS 0.53% |
No fix yet | |
| GHSA-r487-9vv5-75gg Magento Improper Authorization leading to security feature bypass |
High EPSS 0.53% |
No fix yet | |
| GHSA-g2pj-xmxq-3r9q Magento Improper Access Control leads to security feature bypass |
Medium EPSS 0.47% |
< 2.4.5-p13 | 2.4.5-p13 |
| GHSA-g2pj-xmxq-3r9q Magento Improper Access Control leads to security feature bypass |
Medium EPSS 0.47% |
No fix yet | |
| GHSA-g2pj-xmxq-3r9q Magento Improper Access Control leads to security feature bypass |
Medium EPSS 0.47% |
No fix yet | |
| GHSA-g2pj-xmxq-3r9q Magento Improper Access Control leads to security feature bypass |
Medium EPSS 0.47% |
No fix yet | |
| GHSA-g2pj-xmxq-3r9q Magento Improper Access Control leads to security feature bypass |
Medium EPSS 0.47% |
>= 2.4.6-p1, < 2.4.6-p11 | 2.4.6-p11 |
| GHSA-g2pj-xmxq-3r9q Magento Improper Access Control leads to security feature bypass |
Medium EPSS 0.47% |
>= 2.4.7-beta1, < 2.4.7-p6 | 2.4.7-p6 |
| GHSA-g2pj-xmxq-3r9q Magento Improper Access Control leads to security feature bypass |
Medium EPSS 0.47% |
No fix yet | |
| GHSA-2r94-wm5v-4prx Magento does not properly protect credentials |
Low EPSS 0.49% |
No fix yet | |
| GHSA-2r94-wm5v-4prx Magento does not properly protect credentials |
Low EPSS 0.49% |
>= 2.4.7-beta1, < 2.4.7-p5 | 2.4.7-p5 |
| GHSA-2r94-wm5v-4prx Magento does not properly protect credentials |
Low EPSS 0.49% |
>= 2.4.6-p1, < 2.4.6-p10 | 2.4.6-p10 |
| GHSA-2r94-wm5v-4prx Magento does not properly protect credentials |
Low EPSS 0.49% |
>= 2.4.5-p1, < 2.4.5-p12 | 2.4.5-p12 |
| GHSA-2r94-wm5v-4prx Magento does not properly protect credentials |
Low EPSS 0.49% |
< 2.4.4-p13 | 2.4.4-p13 |
| GHSA-2r94-wm5v-4prx Magento does not properly protect credentials |
Low EPSS 0.49% |
>= 2.4.8-beta1, < 2.4.8-beta2 | 2.4.8-beta2 |
| GHSA-2r94-wm5v-4prx Magento does not properly protect credentials |
Low EPSS 0.49% |
No fix yet | |
| GHSA-2r94-wm5v-4prx Magento does not properly protect credentials |
Low EPSS 0.49% |
No fix yet | |
| GHSA-2r94-wm5v-4prx Magento does not properly protect credentials |
Low EPSS 0.49% |
No fix yet | |
| GHSA-vhcq-4xrm-2cr2 Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.50% |
No fix yet | |
| GHSA-vhcq-4xrm-2cr2 Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.50% |
< 2.4.4-p13 | 2.4.4-p13 |
| GHSA-vhcq-4xrm-2cr2 Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.50% |
>= 2.4.5-p1, < 2.4.5-p12 | 2.4.5-p12 |
| GHSA-vhcq-4xrm-2cr2 Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.50% |
No fix yet | |
| GHSA-vhcq-4xrm-2cr2 Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.50% |
No fix yet | |
| GHSA-vhcq-4xrm-2cr2 Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.50% |
>= 2.4.6-p1, < 2.4.6-p10 | 2.4.6-p10 |
| GHSA-vhcq-4xrm-2cr2 Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.50% |
>= 2.4.7-beta1, < 2.4.7-p5 | 2.4.7-p5 |
| GHSA-vhcq-4xrm-2cr2 Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.50% |
>= 2.4.8-beta1, < 2.4.8-beta2 | 2.4.8-beta2 |
| GHSA-vhcq-4xrm-2cr2 Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.50% |
No fix yet | |
| GHSA-6wq7-cg9h-mj6q Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.54% |
>= 2.4.8-beta1, < 2.4.8-beta2 | 2.4.8-beta2 |
| GHSA-6wq7-cg9h-mj6q Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.54% |
No fix yet | |
| GHSA-6wq7-cg9h-mj6q Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.54% |
No fix yet | |
| GHSA-6wq7-cg9h-mj6q Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.54% |
< 2.4.4-p13 | 2.4.4-p13 |
| GHSA-6wq7-cg9h-mj6q Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.54% |
No fix yet | |
| GHSA-6wq7-cg9h-mj6q Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.54% |
>= 2.4.5-p1, < 2.4.5-p12 | 2.4.5-p12 |
| GHSA-6wq7-cg9h-mj6q Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.54% |
>= 2.4.6-p1, < 2.4.6-p10 | 2.4.6-p10 |
| GHSA-6wq7-cg9h-mj6q Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.54% |
>= 2.4.7-beta1, < 2.4.7-p5 | 2.4.7-p5 |
| GHSA-6wq7-cg9h-mj6q Magento Improper Access Control leads to Security feature bypass |
Medium EPSS 0.54% |
No fix yet | |
| GHSA-rr2g-rrjj-xw86 Magento Improper Authorization vulnerability |
Medium EPSS 0.58% |
>= 2.4.7-p1, < 2.4.7-p5 | 2.4.7-p5 |
| GHSA-rr2g-rrjj-xw86 Magento Improper Authorization vulnerability |
Medium EPSS 0.58% |
< 2.4.4-p13 | 2.4.4-p13 |
| GHSA-rr2g-rrjj-xw86 Magento Improper Authorization vulnerability |
Medium EPSS 0.58% |
No fix yet | |
| GHSA-rr2g-rrjj-xw86 Magento Improper Authorization vulnerability |
Medium EPSS 0.58% |
No fix yet | |
| GHSA-rr2g-rrjj-xw86 Magento Improper Authorization vulnerability |
Medium EPSS 0.58% |
>= 2.4.8-beta1, < 2.4.8 | 2.4.8 |
| GHSA-rr2g-rrjj-xw86 Magento Improper Authorization vulnerability |
Medium EPSS 0.58% |
No fix yet | |
| GHSA-rr2g-rrjj-xw86 Magento Improper Authorization vulnerability |
Medium EPSS 0.58% |
>= 2.4.5-p1, < 2.4.5-p12 | 2.4.5-p12 |
| GHSA-rr2g-rrjj-xw86 Magento Improper Authorization vulnerability |
Medium EPSS 0.58% |
No fix yet | |
| GHSA-rr2g-rrjj-xw86 Magento Improper Authorization vulnerability |
Medium EPSS 0.58% |
>= 2.4.6-p1, < 2.4.6-p10 | 2.4.6-p10 |
| GHSA-8884-7rm9-mrx4 Magento stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.80% |
No fix yet | |
| GHSA-8884-7rm9-mrx4 Magento stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.80% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-8884-7rm9-mrx4 Magento stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.80% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-8884-7rm9-mrx4 Magento stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.80% |
No fix yet | |
| GHSA-8884-7rm9-mrx4 Magento stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.80% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-8884-7rm9-mrx4 Magento stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.80% |
No fix yet | |
| GHSA-8884-7rm9-mrx4 Magento stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.80% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-8884-7rm9-mrx4 Magento stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.80% |
No fix yet | |
| GHSA-8884-7rm9-mrx4 Magento stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.80% |
No fix yet | |
| GHSA-469f-wf4f-3jjv Magento Improper Access Control vulnerability |
Medium EPSS 0.45% |
No fix yet | |
| GHSA-469f-wf4f-3jjv Magento Improper Access Control vulnerability |
Medium EPSS 0.45% |
No fix yet | |
| GHSA-469f-wf4f-3jjv Magento Improper Access Control vulnerability |
Medium EPSS 0.45% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-469f-wf4f-3jjv Magento Improper Access Control vulnerability |
Medium EPSS 0.45% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-469f-wf4f-3jjv Magento Improper Access Control vulnerability |
Medium EPSS 0.45% |
No fix yet | |
| GHSA-469f-wf4f-3jjv Magento Improper Access Control vulnerability |
Medium EPSS 0.45% |
No fix yet | |
| GHSA-469f-wf4f-3jjv Magento Improper Access Control vulnerability |
Medium EPSS 0.45% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-469f-wf4f-3jjv Magento Improper Access Control vulnerability |
Medium EPSS 0.45% |
No fix yet | |
| GHSA-469f-wf4f-3jjv Magento Improper Access Control vulnerability |
Medium EPSS 0.45% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-ghpr-6qhr-rpp8 Magento Improper Access Control vulnerability |
Medium EPSS 0.55% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-ghpr-6qhr-rpp8 Magento Improper Access Control vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-ghpr-6qhr-rpp8 Magento Improper Access Control vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-ghpr-6qhr-rpp8 Magento Improper Access Control vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-ghpr-6qhr-rpp8 Magento Improper Access Control vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-ghpr-6qhr-rpp8 Magento Improper Access Control vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-ghpr-6qhr-rpp8 Magento Improper Access Control vulnerability |
Medium EPSS 0.55% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-ghpr-6qhr-rpp8 Magento Improper Access Control vulnerability |
Medium EPSS 0.55% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-ghpr-6qhr-rpp8 Magento Improper Access Control vulnerability |
Medium EPSS 0.55% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-82p4-55gj-956p Magento Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-82p4-55gj-956p Magento Improper Access Control vulnerability |
Medium EPSS 0.53% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-82p4-55gj-956p Magento Improper Access Control vulnerability |
Medium EPSS 0.53% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-82p4-55gj-956p Magento Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-82p4-55gj-956p Magento Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-82p4-55gj-956p Magento Improper Access Control vulnerability |
Medium EPSS 0.53% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-82p4-55gj-956p Magento Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-82p4-55gj-956p Magento Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-82p4-55gj-956p Magento Improper Access Control vulnerability |
Medium EPSS 0.53% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-fppq-f2m6-xv5c Improper Authorization vulnerability in Magento and Adobe Commerce |
Critical EPSS 17.19% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-fppq-f2m6-xv5c Improper Authorization vulnerability in Magento and Adobe Commerce |
Critical EPSS 17.19% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-fppq-f2m6-xv5c Improper Authorization vulnerability in Magento and Adobe Commerce |
Critical EPSS 17.19% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-fppq-f2m6-xv5c Improper Authorization vulnerability in Magento and Adobe Commerce |
Critical EPSS 17.19% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-fppq-f2m6-xv5c Improper Authorization vulnerability in Magento and Adobe Commerce |
Critical EPSS 17.19% |
>= 2.4.8-beta1, < 2.4.8-beta2 | 2.4.8-beta2 |
| GHSA-7jmr-43qj-pw47 Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-7jmr-43qj-pw47 Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-7jmr-43qj-pw47 Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-7jmr-43qj-pw47 Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-7jmr-43qj-pw47 Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-7jmr-43qj-pw47 Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-7jmr-43qj-pw47 Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-7jmr-43qj-pw47 Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-7jmr-43qj-pw47 Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-6w27-c66f-gvhq Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-6w27-c66f-gvhq Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-6w27-c66f-gvhq Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-6w27-c66f-gvhq Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-6w27-c66f-gvhq Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-6w27-c66f-gvhq Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-6w27-c66f-gvhq Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-6w27-c66f-gvhq Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-6w27-c66f-gvhq Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-656q-fx2w-8ccv Magento Improper Access Control vulnerability |
Low EPSS 0.50% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-656q-fx2w-8ccv Magento Improper Access Control vulnerability |
Low EPSS 0.50% |
No fix yet | |
| GHSA-656q-fx2w-8ccv Magento Improper Access Control vulnerability |
Low EPSS 0.50% |
No fix yet | |
| GHSA-656q-fx2w-8ccv Magento Improper Access Control vulnerability |
Low EPSS 0.50% |
No fix yet | |
| GHSA-656q-fx2w-8ccv Magento Improper Access Control vulnerability |
Low EPSS 0.50% |
No fix yet | |
| GHSA-656q-fx2w-8ccv Magento Improper Access Control vulnerability |
Low EPSS 0.50% |
No fix yet | |
| GHSA-656q-fx2w-8ccv Magento Improper Access Control vulnerability |
Low EPSS 0.50% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-656q-fx2w-8ccv Magento Improper Access Control vulnerability |
Low EPSS 0.50% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-656q-fx2w-8ccv Magento Improper Access Control vulnerability |
Low EPSS 0.50% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-mm87-rrqx-94cr Magento stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.41% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-mm87-rrqx-94cr Magento stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.41% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-mm87-rrqx-94cr Magento stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.41% |
No fix yet | |
| GHSA-mm87-rrqx-94cr Magento stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.41% |
No fix yet | |
| GHSA-mm87-rrqx-94cr Magento stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.41% |
No fix yet | |
| GHSA-mm87-rrqx-94cr Magento stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.41% |
No fix yet | |
| GHSA-mm87-rrqx-94cr Magento stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.41% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-mm87-rrqx-94cr Magento stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.41% |
No fix yet | |
| GHSA-mm87-rrqx-94cr Magento stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.41% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-v3hq-g424-5mgg Magento Improper Access Control vulnerability |
Medium EPSS 0.63% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-v3hq-g424-5mgg Magento Improper Access Control vulnerability |
Medium EPSS 0.63% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-v3hq-g424-5mgg Magento Improper Access Control vulnerability |
Medium EPSS 0.63% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-v3hq-g424-5mgg Magento Improper Access Control vulnerability |
Medium EPSS 0.63% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-v3hq-g424-5mgg Magento Improper Access Control vulnerability |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-v3hq-g424-5mgg Magento Improper Access Control vulnerability |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-v3hq-g424-5mgg Magento Improper Access Control vulnerability |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-v3hq-g424-5mgg Magento Improper Access Control vulnerability |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-v3hq-g424-5mgg Magento Improper Access Control vulnerability |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-6ff8-jrfg-43hh Magento Business Logic Error vulnerability |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-6ff8-jrfg-43hh Magento Business Logic Error vulnerability |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-6ff8-jrfg-43hh Magento Business Logic Error vulnerability |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-6ff8-jrfg-43hh Magento Business Logic Error vulnerability |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-6ff8-jrfg-43hh Magento Business Logic Error vulnerability |
Medium EPSS 0.63% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-6ff8-jrfg-43hh Magento Business Logic Error vulnerability |
Medium EPSS 0.63% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-6ff8-jrfg-43hh Magento Business Logic Error vulnerability |
Medium EPSS 0.63% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-6ff8-jrfg-43hh Magento Business Logic Error vulnerability |
Medium EPSS 0.63% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-6ff8-jrfg-43hh Magento Business Logic Error vulnerability |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-539v-w87w-w62c Magento Improper Access Control vulnerability |
Medium EPSS 0.77% |
No fix yet | |
| GHSA-539v-w87w-w62c Magento Improper Access Control vulnerability |
Medium EPSS 0.77% |
No fix yet | |
| GHSA-539v-w87w-w62c Magento Improper Access Control vulnerability |
Medium EPSS 0.77% |
No fix yet | |
| GHSA-539v-w87w-w62c Magento Improper Access Control vulnerability |
Medium EPSS 0.77% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-539v-w87w-w62c Magento Improper Access Control vulnerability |
Medium EPSS 0.77% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-539v-w87w-w62c Magento Improper Access Control vulnerability |
Medium EPSS 0.77% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-539v-w87w-w62c Magento Improper Access Control vulnerability |
Medium EPSS 0.77% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-539v-w87w-w62c Magento Improper Access Control vulnerability |
Medium EPSS 0.77% |
No fix yet | |
| GHSA-539v-w87w-w62c Magento Improper Access Control vulnerability |
Medium EPSS 0.77% |
No fix yet | |
| GHSA-v6r2-425c-hfrr Magento Incorrect Authorization vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-v6r2-425c-hfrr Magento Incorrect Authorization vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-v6r2-425c-hfrr Magento Incorrect Authorization vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-v6r2-425c-hfrr Magento Incorrect Authorization vulnerability |
Medium EPSS 0.55% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-v6r2-425c-hfrr Magento Incorrect Authorization vulnerability |
Medium EPSS 0.55% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-v6r2-425c-hfrr Magento Incorrect Authorization vulnerability |
Medium EPSS 0.55% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-v6r2-425c-hfrr Magento Incorrect Authorization vulnerability |
Medium EPSS 0.55% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-v6r2-425c-hfrr Magento Incorrect Authorization vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-g3j6-9753-8mp2 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-g3j6-9753-8mp2 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-g3j6-9753-8mp2 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-g3j6-9753-8mp2 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-g3j6-9753-8mp2 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-g3j6-9753-8mp2 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-g3j6-9753-8mp2 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-g3j6-9753-8mp2 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-g3j6-9753-8mp2 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-rjjw-g6hw-7pc9 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-rjjw-g6hw-7pc9 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-rjjw-g6hw-7pc9 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-rjjw-g6hw-7pc9 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-rjjw-g6hw-7pc9 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-rjjw-g6hw-7pc9 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-rjjw-g6hw-7pc9 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-rjjw-g6hw-7pc9 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-rjjw-g6hw-7pc9 Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-gc27-rvvm-q77r Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-gc27-rvvm-q77r Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-gc27-rvvm-q77r Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-gc27-rvvm-q77r Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-gc27-rvvm-q77r Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-gc27-rvvm-q77r Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-gc27-rvvm-q77r Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-gc27-rvvm-q77r Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-gc27-rvvm-q77r Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-fhw6-3mj5-w9gv Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-fhw6-3mj5-w9gv Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-fhw6-3mj5-w9gv Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-fhw6-3mj5-w9gv Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-fhw6-3mj5-w9gv Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-fhw6-3mj5-w9gv Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-fhw6-3mj5-w9gv Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-fhw6-3mj5-w9gv Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-fhw6-3mj5-w9gv Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-xwgx-8v72-4j5j Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-xwgx-8v72-4j5j Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-xwgx-8v72-4j5j Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-xwgx-8v72-4j5j Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-xwgx-8v72-4j5j Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-xwgx-8v72-4j5j Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-xwgx-8v72-4j5j Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-xwgx-8v72-4j5j Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-xwgx-8v72-4j5j Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-m4rg-mpp2-97px Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-m4rg-mpp2-97px Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-m4rg-mpp2-97px Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-m4rg-mpp2-97px Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-m4rg-mpp2-97px Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-m4rg-mpp2-97px Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-m4rg-mpp2-97px Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-m4rg-mpp2-97px Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-m4rg-mpp2-97px Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-36hw-x3cc-m258 Magento Improper Access Control vulnerability |
High EPSS 0.91% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-36hw-x3cc-m258 Magento Improper Access Control vulnerability |
High EPSS 0.91% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-36hw-x3cc-m258 Magento Improper Access Control vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-36hw-x3cc-m258 Magento Improper Access Control vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-36hw-x3cc-m258 Magento Improper Access Control vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-36hw-x3cc-m258 Magento Improper Access Control vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-36hw-x3cc-m258 Magento Improper Access Control vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-36hw-x3cc-m258 Magento Improper Access Control vulnerability |
High EPSS 0.91% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-36hw-x3cc-m258 Magento Improper Access Control vulnerability |
High EPSS 0.91% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-gjxp-46rq-wg4q Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-gjxp-46rq-wg4q Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-gjxp-46rq-wg4q Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-gjxp-46rq-wg4q Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-gjxp-46rq-wg4q Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-gjxp-46rq-wg4q Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-gjxp-46rq-wg4q Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-gjxp-46rq-wg4q Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-gjxp-46rq-wg4q Magento Stored Cross-Site Scripting (XSS) Vulnerability |
High EPSS 0.70% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-vw47-79jv-3598 Adobe Commerce Improper Authorization vulnerability |
High EPSS 0.68% |
No fix yet | |
| GHSA-vw47-79jv-3598 Adobe Commerce Improper Authorization vulnerability |
High EPSS 0.68% |
No fix yet | |
| GHSA-vw47-79jv-3598 Adobe Commerce Improper Authorization vulnerability |
High EPSS 0.68% |
No fix yet | |
| GHSA-vw47-79jv-3598 Adobe Commerce Improper Authorization vulnerability |
High EPSS 0.68% |
No fix yet | |
| GHSA-vw47-79jv-3598 Adobe Commerce Improper Authorization vulnerability |
High EPSS 0.68% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-vw47-79jv-3598 Adobe Commerce Improper Authorization vulnerability |
High EPSS 0.68% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-vw47-79jv-3598 Adobe Commerce Improper Authorization vulnerability |
High EPSS 0.68% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-vw47-79jv-3598 Adobe Commerce Improper Authorization vulnerability |
High EPSS 0.68% |
No fix yet | |
| GHSA-vw47-79jv-3598 Adobe Commerce Improper Authorization vulnerability |
High EPSS 0.68% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-3cfg-w257-cgf8 Magento Information Exposure vulnerability |
Medium EPSS 0.96% |
No fix yet | |
| GHSA-3cfg-w257-cgf8 Magento Information Exposure vulnerability |
Medium EPSS 0.96% |
No fix yet | |
| GHSA-3cfg-w257-cgf8 Magento Information Exposure vulnerability |
Medium EPSS 0.96% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-3cfg-w257-cgf8 Magento Information Exposure vulnerability |
Medium EPSS 0.96% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-3cfg-w257-cgf8 Magento Information Exposure vulnerability |
Medium EPSS 0.96% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-3cfg-w257-cgf8 Magento Information Exposure vulnerability |
Medium EPSS 0.96% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-3cfg-w257-cgf8 Magento Information Exposure vulnerability |
Medium EPSS 0.96% |
No fix yet | |
| GHSA-3cfg-w257-cgf8 Magento Information Exposure vulnerability |
Medium EPSS 0.96% |
No fix yet | |
| GHSA-3cfg-w257-cgf8 Magento Information Exposure vulnerability |
Medium EPSS 0.96% |
No fix yet | |
| GHSA-954p-ff72-327w Adobe Commerce Path Traversal |
High EPSS 1.40% |
>= 2.4.6-p1, < 2.4.6-p9 | 2.4.6-p9 |
| GHSA-954p-ff72-327w Adobe Commerce Path Traversal |
High EPSS 1.40% |
No fix yet | |
| GHSA-954p-ff72-327w Adobe Commerce Path Traversal |
High EPSS 1.40% |
No fix yet | |
| GHSA-954p-ff72-327w Adobe Commerce Path Traversal |
High EPSS 1.40% |
No fix yet | |
| GHSA-954p-ff72-327w Adobe Commerce Path Traversal |
High EPSS 1.40% |
No fix yet | |
| GHSA-954p-ff72-327w Adobe Commerce Path Traversal |
High EPSS 1.40% |
No fix yet | |
| GHSA-954p-ff72-327w Adobe Commerce Path Traversal |
High EPSS 1.40% |
< 2.4.4-p12 | 2.4.4-p12 |
| GHSA-954p-ff72-327w Adobe Commerce Path Traversal |
High EPSS 1.40% |
>= 2.4.5-p1, < 2.4.5-p11 | 2.4.5-p11 |
| GHSA-954p-ff72-327w Adobe Commerce Path Traversal |
High EPSS 1.40% |
>= 2.4.7-beta1, < 2.4.7-p4 | 2.4.7-p4 |
| GHSA-w7rg-7wq2-pjrw Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.48% |
No fix yet | |
| GHSA-w7rg-7wq2-pjrw Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.48% |
No fix yet | |
| GHSA-w7rg-7wq2-pjrw Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.48% |
No fix yet | |
| GHSA-w7rg-7wq2-pjrw Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.48% |
No fix yet | |
| GHSA-w7rg-7wq2-pjrw Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.48% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-w7rg-7wq2-pjrw Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.48% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-w7rg-7wq2-pjrw Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.48% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-w7rg-7wq2-pjrw Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.48% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-8pxg-gcp4-57ww Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.58% |
No fix yet | |
| GHSA-8pxg-gcp4-57ww Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.58% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-8pxg-gcp4-57ww Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.58% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-8pxg-gcp4-57ww Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.58% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-8pxg-gcp4-57ww Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.58% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-8pxg-gcp4-57ww Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.58% |
No fix yet | |
| GHSA-8pxg-gcp4-57ww Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.58% |
No fix yet | |
| GHSA-8pxg-gcp4-57ww Magento Open Source Improper Access Control vulnerability |
Low EPSS 0.58% |
No fix yet | |
| GHSA-4f89-5cwm-rm5g Magento Open Source Information Exposure vulnerability |
Low EPSS 0.63% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-4f89-5cwm-rm5g Magento Open Source Information Exposure vulnerability |
Low EPSS 0.63% |
No fix yet | |
| GHSA-4f89-5cwm-rm5g Magento Open Source Information Exposure vulnerability |
Low EPSS 0.63% |
No fix yet | |
| GHSA-4f89-5cwm-rm5g Magento Open Source Information Exposure vulnerability |
Low EPSS 0.63% |
No fix yet | |
| GHSA-4f89-5cwm-rm5g Magento Open Source Information Exposure vulnerability |
Low EPSS 0.63% |
No fix yet | |
| GHSA-4f89-5cwm-rm5g Magento Open Source Information Exposure vulnerability |
Low EPSS 0.63% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-4f89-5cwm-rm5g Magento Open Source Information Exposure vulnerability |
Low EPSS 0.63% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-4f89-5cwm-rm5g Magento Open Source Information Exposure vulnerability |
Low EPSS 0.63% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-j3mh-wx5f-2vhg Magento Open Source Information Exposure vulnerability |
Low EPSS 0.60% |
No fix yet | |
| GHSA-j3mh-wx5f-2vhg Magento Open Source Information Exposure vulnerability |
Low EPSS 0.60% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-j3mh-wx5f-2vhg Magento Open Source Information Exposure vulnerability |
Low EPSS 0.60% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-j3mh-wx5f-2vhg Magento Open Source Information Exposure vulnerability |
Low EPSS 0.60% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-j3mh-wx5f-2vhg Magento Open Source Information Exposure vulnerability |
Low EPSS 0.60% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-j3mh-wx5f-2vhg Magento Open Source Information Exposure vulnerability |
Low EPSS 0.60% |
No fix yet | |
| GHSA-j3mh-wx5f-2vhg Magento Open Source Information Exposure vulnerability |
Low EPSS 0.60% |
No fix yet | |
| GHSA-j3mh-wx5f-2vhg Magento Open Source Information Exposure vulnerability |
Low EPSS 0.60% |
No fix yet | |
| GHSA-5f64-ppmg-cvvm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.73% |
No fix yet | |
| GHSA-5f64-ppmg-cvvm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.73% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-5f64-ppmg-cvvm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.73% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-5f64-ppmg-cvvm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.73% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-5f64-ppmg-cvvm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.73% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-5f64-ppmg-cvvm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.73% |
No fix yet | |
| GHSA-5f64-ppmg-cvvm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.73% |
No fix yet | |
| GHSA-5f64-ppmg-cvvm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.73% |
No fix yet | |
| GHSA-xc5p-773w-m3pm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.45% |
No fix yet | |
| GHSA-xc5p-773w-m3pm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.45% |
No fix yet | |
| GHSA-xc5p-773w-m3pm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.45% |
No fix yet | |
| GHSA-xc5p-773w-m3pm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.45% |
No fix yet | |
| GHSA-xc5p-773w-m3pm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.45% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-xc5p-773w-m3pm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.45% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-xc5p-773w-m3pm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.45% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-xc5p-773w-m3pm Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.45% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-v3v6-jfvw-m576 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-v3v6-jfvw-m576 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-v3v6-jfvw-m576 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-v3v6-jfvw-m576 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-v3v6-jfvw-m576 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-v3v6-jfvw-m576 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-v3v6-jfvw-m576 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-v3v6-jfvw-m576 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-m58h-998x-66f3 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-m58h-998x-66f3 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-m58h-998x-66f3 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-m58h-998x-66f3 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-m58h-998x-66f3 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-m58h-998x-66f3 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-m58h-998x-66f3 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-m58h-998x-66f3 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-qpp7-742q-58j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.59% |
No fix yet | |
| GHSA-qpp7-742q-58j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.59% |
No fix yet | |
| GHSA-qpp7-742q-58j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.59% |
No fix yet | |
| GHSA-qpp7-742q-58j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.59% |
No fix yet | |
| GHSA-qpp7-742q-58j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.59% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-qpp7-742q-58j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.59% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-qpp7-742q-58j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.59% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-qpp7-742q-58j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.59% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-c89g-gq5r-2xw2 Magento Open Source stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.49% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-c89g-gq5r-2xw2 Magento Open Source stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-c89g-gq5r-2xw2 Magento Open Source stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-c89g-gq5r-2xw2 Magento Open Source stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-c89g-gq5r-2xw2 Magento Open Source stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-c89g-gq5r-2xw2 Magento Open Source stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.49% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-c89g-gq5r-2xw2 Magento Open Source stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.49% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-c89g-gq5r-2xw2 Magento Open Source stored Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.49% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-xg36-8c2v-jpxh Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-xg36-8c2v-jpxh Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-xg36-8c2v-jpxh Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.53% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-xg36-8c2v-jpxh Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.53% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-xg36-8c2v-jpxh Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.53% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-xg36-8c2v-jpxh Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.53% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-xg36-8c2v-jpxh Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-xg36-8c2v-jpxh Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-w3p2-pc3h-69wv Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.60% |
No fix yet | |
| GHSA-w3p2-pc3h-69wv Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.60% |
No fix yet | |
| GHSA-w3p2-pc3h-69wv Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.60% |
No fix yet | |
| GHSA-w3p2-pc3h-69wv Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.60% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-w3p2-pc3h-69wv Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.60% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-w3p2-pc3h-69wv Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.60% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-w3p2-pc3h-69wv Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.60% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-w3p2-pc3h-69wv Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.60% |
No fix yet | |
| GHSA-88x2-cq34-5fwc Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.48% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-88x2-cq34-5fwc Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.48% |
No fix yet | |
| GHSA-88x2-cq34-5fwc Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.48% |
No fix yet | |
| GHSA-88x2-cq34-5fwc Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.48% |
No fix yet | |
| GHSA-88x2-cq34-5fwc Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.48% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-88x2-cq34-5fwc Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.48% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-88x2-cq34-5fwc Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.48% |
No fix yet | |
| GHSA-88x2-cq34-5fwc Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.48% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-46fm-x82m-5f74 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.55% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-46fm-x82m-5f74 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.55% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-46fm-x82m-5f74 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-46fm-x82m-5f74 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-46fm-x82m-5f74 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-46fm-x82m-5f74 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.55% |
No fix yet | |
| GHSA-46fm-x82m-5f74 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.55% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-46fm-x82m-5f74 Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.55% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-2qhq-fw98-h6wg Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-2qhq-fw98-h6wg Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-2qhq-fw98-h6wg Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-2qhq-fw98-h6wg Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-2qhq-fw98-h6wg Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-2qhq-fw98-h6wg Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-2qhq-fw98-h6wg Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-2qhq-fw98-h6wg Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.53% |
No fix yet | |
| GHSA-47jp-46c9-25vf Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-47jp-46c9-25vf Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-47jp-46c9-25vf Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-47jp-46c9-25vf Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
No fix yet | |
| GHSA-47jp-46c9-25vf Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-47jp-46c9-25vf Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-47jp-46c9-25vf Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-47jp-46c9-25vf Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability |
Low EPSS 0.40% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-g9fm-wc6h-pvgj Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
Medium EPSS 0.88% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-g9fm-wc6h-pvgj Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
Medium EPSS 0.88% |
No fix yet | |
| GHSA-g9fm-wc6h-pvgj Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
Medium EPSS 0.88% |
No fix yet | |
| GHSA-g9fm-wc6h-pvgj Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
Medium EPSS 0.88% |
No fix yet | |
| GHSA-g9fm-wc6h-pvgj Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
Medium EPSS 0.88% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-g9fm-wc6h-pvgj Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
Medium EPSS 0.88% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-g9fm-wc6h-pvgj Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
Medium EPSS 0.88% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-g9fm-wc6h-pvgj Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
Medium EPSS 0.88% |
No fix yet | |
| GHSA-cg52-68fv-94qq Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.64% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-cg52-68fv-94qq Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.64% |
No fix yet | |
| GHSA-cg52-68fv-94qq Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.64% |
No fix yet | |
| GHSA-cg52-68fv-94qq Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.64% |
No fix yet | |
| GHSA-cg52-68fv-94qq Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.64% |
No fix yet | |
| GHSA-cg52-68fv-94qq Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.64% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-cg52-68fv-94qq Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.64% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-cg52-68fv-94qq Magento Open Source Improper Access Control vulnerability |
Medium EPSS 0.64% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-3fr3-gcqh-3m2g Magento Open Source Improper Input Validation vulnerability |
High EPSS 0.85% |
No fix yet | |
| GHSA-3fr3-gcqh-3m2g Magento Open Source Improper Input Validation vulnerability |
High EPSS 0.85% |
No fix yet | |
| GHSA-3fr3-gcqh-3m2g Magento Open Source Improper Input Validation vulnerability |
High EPSS 0.85% |
No fix yet | |
| GHSA-3fr3-gcqh-3m2g Magento Open Source Improper Input Validation vulnerability |
High EPSS 0.85% |
No fix yet | |
| GHSA-3fr3-gcqh-3m2g Magento Open Source Improper Input Validation vulnerability |
High EPSS 0.85% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-3fr3-gcqh-3m2g Magento Open Source Improper Input Validation vulnerability |
High EPSS 0.85% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-3fr3-gcqh-3m2g Magento Open Source Improper Input Validation vulnerability |
High EPSS 0.85% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-3fr3-gcqh-3m2g Magento Open Source Improper Input Validation vulnerability |
High EPSS 0.85% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-873m-72g6-853g Magento Open Source Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.94% |
>= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
| GHSA-873m-72g6-853g Magento Open Source Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.94% |
No fix yet | |
| GHSA-873m-72g6-853g Magento Open Source Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.94% |
No fix yet | |
| GHSA-873m-72g6-853g Magento Open Source Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.94% |
No fix yet | |
| GHSA-873m-72g6-853g Magento Open Source Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.94% |
No fix yet | |
| GHSA-873m-72g6-853g Magento Open Source Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.94% |
< 2.4.4-p11 | 2.4.4-p11 |
| GHSA-873m-72g6-853g Magento Open Source Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.94% |
>= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
| GHSA-873m-72g6-853g Magento Open Source Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.94% |
>= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
| GHSA-74w7-cr4v-wf2v Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.43% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-74w7-cr4v-wf2v Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-74w7-cr4v-wf2v Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-74w7-cr4v-wf2v Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-74w7-cr4v-wf2v Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-74w7-cr4v-wf2v Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.43% |
< 2.4.4-p10 | 2.4.4-p10 |
| GHSA-74w7-cr4v-wf2v Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.43% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-74w7-cr4v-wf2v Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.43% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-gvgf-pvh5-vjh4 Magento Improper Authorization vulnerability |
Medium EPSS 0.41% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-gvgf-pvh5-vjh4 Magento Improper Authorization vulnerability |
Medium EPSS 0.41% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-gvgf-pvh5-vjh4 Magento Improper Authorization vulnerability |
Medium EPSS 0.41% |
>= 2.4.4-p1, < 2.4.4-p10 | 2.4.4-p10 |
| GHSA-gvgf-pvh5-vjh4 Magento Improper Authorization vulnerability |
Medium EPSS 0.41% |
No fix yet | |
| GHSA-gvgf-pvh5-vjh4 Magento Improper Authorization vulnerability |
Medium EPSS 0.41% |
No fix yet | |
| GHSA-gvgf-pvh5-vjh4 Magento Improper Authorization vulnerability |
Medium EPSS 0.41% |
No fix yet | |
| GHSA-gvgf-pvh5-vjh4 Magento Improper Authorization vulnerability |
Medium EPSS 0.41% |
No fix yet | |
| GHSA-gvgf-pvh5-vjh4 Magento Improper Authorization vulnerability |
Medium EPSS 0.41% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-4xmj-f664-hv98 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-4xmj-f664-hv98 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.44% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-4xmj-f664-hv98 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.44% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-4xmj-f664-hv98 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.44% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-4xmj-f664-hv98 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.44% |
< 2.4.4-p10 | 2.4.4-p10 |
| GHSA-4xmj-f664-hv98 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-4xmj-f664-hv98 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-4xmj-f664-hv98 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-4xgg-rw35-7mv5 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.42% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-4xgg-rw35-7mv5 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.42% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-4xgg-rw35-7mv5 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.42% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-4xgg-rw35-7mv5 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.42% |
< 2.4.4-p10 | 2.4.4-p10 |
| GHSA-4xgg-rw35-7mv5 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.42% |
No fix yet | |
| GHSA-4xgg-rw35-7mv5 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.42% |
No fix yet | |
| GHSA-4xgg-rw35-7mv5 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.42% |
No fix yet | |
| GHSA-4xgg-rw35-7mv5 Magento Improper Authorization leads to Security feature bypass |
Medium EPSS 0.42% |
No fix yet | |
| GHSA-gj93-84g5-mcjq Magento Improper Authorization Leading to Security feature bypass |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-gj93-84g5-mcjq Magento Improper Authorization Leading to Security feature bypass |
Medium EPSS 0.44% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-gj93-84g5-mcjq Magento Improper Authorization Leading to Security feature bypass |
Medium EPSS 0.44% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-gj93-84g5-mcjq Magento Improper Authorization Leading to Security feature bypass |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-gj93-84g5-mcjq Magento Improper Authorization Leading to Security feature bypass |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-gj93-84g5-mcjq Magento Improper Authorization Leading to Security feature bypass |
Medium EPSS 0.44% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-gj93-84g5-mcjq Magento Improper Authorization Leading to Security feature bypass |
Medium EPSS 0.44% |
< 2.4.4-p10 | 2.4.4-p10 |
| GHSA-gj93-84g5-mcjq Magento Improper Authorization Leading to Security feature bypass |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-x6f9-hv9r-fgq4 Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-x6f9-hv9r-fgq4 Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.44% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-x6f9-hv9r-fgq4 Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.44% |
< 2.4.4-p10 | 2.4.4-p10 |
| GHSA-x6f9-hv9r-fgq4 Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-x6f9-hv9r-fgq4 Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-x6f9-hv9r-fgq4 Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-x6f9-hv9r-fgq4 Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.44% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-x6f9-hv9r-fgq4 Magento Improper Access Control Leads to Privilege escalation |
Medium EPSS 0.44% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-8w5f-8992-g86j Magento Improper Authorization vulnerability |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-8w5f-8992-g86j Magento Improper Authorization vulnerability |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-8w5f-8992-g86j Magento Improper Authorization vulnerability |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-8w5f-8992-g86j Magento Improper Authorization vulnerability |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-8w5f-8992-g86j Magento Improper Authorization vulnerability |
Medium EPSS 0.44% |
>= 2.4.4-p1, < 2.4.4-p10 | 2.4.4-p10 |
| GHSA-8w5f-8992-g86j Magento Improper Authorization vulnerability |
Medium EPSS 0.44% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-8w5f-8992-g86j Magento Improper Authorization vulnerability |
Medium EPSS 0.44% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-8w5f-8992-g86j Magento Improper Authorization vulnerability |
Medium EPSS 0.44% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-7472-vw39-g2j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-7472-vw39-g2j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.43% |
>= 2.4.7-p1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-7472-vw39-g2j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.43% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-7472-vw39-g2j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.43% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-7472-vw39-g2j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-7472-vw39-g2j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-7472-vw39-g2j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.43% |
< 2.4.4-p10 | 2.4.4-p10 |
| GHSA-7472-vw39-g2j3 Magento Open Source Improper Authorization vulnerability |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-qm77-mqf3-fmhq Magento Improper Authorization leads to security feature bypass |
Medium EPSS 0.44% |
< 2.4.4-p10 | 2.4.4-p10 |
| GHSA-qm77-mqf3-fmhq Magento Improper Authorization leads to security feature bypass |
Medium EPSS 0.44% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-qm77-mqf3-fmhq Magento Improper Authorization leads to security feature bypass |
Medium EPSS 0.44% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-qm77-mqf3-fmhq Magento Improper Authorization leads to security feature bypass |
Medium EPSS 0.44% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-qm77-mqf3-fmhq Magento Improper Authorization leads to security feature bypass |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-qm77-mqf3-fmhq Magento Improper Authorization leads to security feature bypass |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-qm77-mqf3-fmhq Magento Improper Authorization leads to security feature bypass |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-qm77-mqf3-fmhq Magento Improper Authorization leads to security feature bypass |
Medium EPSS 0.44% |
No fix yet | |
| GHSA-4323-f82v-f6jr Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-4323-f82v-f6jr Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
< 2.4.4-p10 | 2.4.4-p10 |
| GHSA-4323-f82v-f6jr Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
>= 2.4.7-p1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-4323-f82v-f6jr Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-4323-f82v-f6jr Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-4323-f82v-f6jr Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-4323-f82v-f6jr Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-4323-f82v-f6jr Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-rf4q-m23c-7q8r Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-rf4q-m23c-7q8r Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-rf4q-m23c-7q8r Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-rf4q-m23c-7q8r Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
< 2.4.4-p10 | 2.4.4-p10 |
| GHSA-rf4q-m23c-7q8r Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-rf4q-m23c-7q8r Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-rf4q-m23c-7q8r Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
>= 2.4.7-p1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-rf4q-m23c-7q8r Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-4cj6-f32v-6hgx Magento Open Source Cross-Site Request Forgery vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-4cj6-f32v-6hgx Magento Open Source Cross-Site Request Forgery vulnerability |
Medium EPSS 0.49% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-4cj6-f32v-6hgx Magento Open Source Cross-Site Request Forgery vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-4cj6-f32v-6hgx Magento Open Source Cross-Site Request Forgery vulnerability |
Medium EPSS 0.49% |
>= 2.4.7-p1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-4cj6-f32v-6hgx Magento Open Source Cross-Site Request Forgery vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-4cj6-f32v-6hgx Magento Open Source Cross-Site Request Forgery vulnerability |
Medium EPSS 0.49% |
< 2.4.4-p10 | 2.4.4-p10 |
| GHSA-4cj6-f32v-6hgx Magento Open Source Cross-Site Request Forgery vulnerability |
Medium EPSS 0.49% |
No fix yet | |
| GHSA-4cj6-f32v-6hgx Magento Open Source Cross-Site Request Forgery vulnerability |
Medium EPSS 0.49% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-cjm6-8mw8-2f8c Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-cjm6-8mw8-2f8c Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-cjm6-8mw8-2f8c Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-cjm6-8mw8-2f8c Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
>= 2.4.4-p1, < 2.4.4-p10 | 2.4.4-p10 |
| GHSA-cjm6-8mw8-2f8c Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-cjm6-8mw8-2f8c Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-cjm6-8mw8-2f8c Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-cjm6-8mw8-2f8c Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-6pxh-2557-5cj5 Magento Open Source Path Traversal vulnerability |
Medium EPSS 0.87% |
No fix yet | |
| GHSA-6pxh-2557-5cj5 Magento Open Source Path Traversal vulnerability |
Medium EPSS 0.87% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-6pxh-2557-5cj5 Magento Open Source Path Traversal vulnerability |
Medium EPSS 0.87% |
No fix yet | |
| GHSA-6pxh-2557-5cj5 Magento Open Source Path Traversal vulnerability |
Medium EPSS 0.87% |
No fix yet | |
| GHSA-6pxh-2557-5cj5 Magento Open Source Path Traversal vulnerability |
Medium EPSS 0.87% |
< 2.4.4-p10 | 2.4.4-p10 |
| GHSA-6pxh-2557-5cj5 Magento Open Source Path Traversal vulnerability |
Medium EPSS 0.87% |
>= 2.4.7-p1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-6pxh-2557-5cj5 Magento Open Source Path Traversal vulnerability |
Medium EPSS 0.87% |
No fix yet | |
| GHSA-6pxh-2557-5cj5 Magento Open Source Path Traversal vulnerability |
Medium EPSS 0.87% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-5g9f-7gqc-8hj4 Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-5g9f-7gqc-8hj4 Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-5g9f-7gqc-8hj4 Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-5g9f-7gqc-8hj4 Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
>= 2.4.4-p1, < 2.4.4-p10 | 2.4.4-p10 |
| GHSA-5g9f-7gqc-8hj4 Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-5g9f-7gqc-8hj4 Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-5g9f-7gqc-8hj4 Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-5g9f-7gqc-8hj4 Magento Improper Authorization vulnerability |
Medium EPSS 0.43% |
No fix yet | |
| GHSA-qrh3-vxjg-h9h6 Magento Improper Authorization vulnerability |
Medium EPSS 0.46% |
No fix yet | |
| GHSA-qrh3-vxjg-h9h6 Magento Improper Authorization vulnerability |
Medium EPSS 0.46% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-qrh3-vxjg-h9h6 Magento Improper Authorization vulnerability |
Medium EPSS 0.46% |
>= 2.4.4-p1, < 2.4.4-p10 | 2.4.4-p10 |
| GHSA-qrh3-vxjg-h9h6 Magento Improper Authorization vulnerability |
Medium EPSS 0.46% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-qrh3-vxjg-h9h6 Magento Improper Authorization vulnerability |
Medium EPSS 0.46% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-qrh3-vxjg-h9h6 Magento Improper Authorization vulnerability |
Medium EPSS 0.46% |
No fix yet | |
| GHSA-qrh3-vxjg-h9h6 Magento Improper Authorization vulnerability |
Medium EPSS 0.46% |
No fix yet | |
| GHSA-qrh3-vxjg-h9h6 Magento Improper Authorization vulnerability |
Medium EPSS 0.46% |
No fix yet | |
| GHSA-mmp7-8cg4-9wrg Magento Stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.54% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-mmp7-8cg4-9wrg Magento Stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.54% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-mmp7-8cg4-9wrg Magento Stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.54% |
No fix yet | |
| GHSA-mmp7-8cg4-9wrg Magento Stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.54% |
No fix yet | |
| GHSA-mmp7-8cg4-9wrg Magento Stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.54% |
No fix yet | |
| GHSA-mmp7-8cg4-9wrg Magento Stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.54% |
No fix yet | |
| GHSA-mmp7-8cg4-9wrg Magento Stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.54% |
>= 2.4.4-p1, < 2.4.4-p10 | 2.4.4-p10 |
| GHSA-mmp7-8cg4-9wrg Magento Stored Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.54% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-2ff6-837j-hg5x Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
No fix yet | |
| GHSA-2ff6-837j-hg5x Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-2ff6-837j-hg5x Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-2ff6-837j-hg5x Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-2ff6-837j-hg5x Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
>= 2.4.4-p1, < 2.4.4-p10 | 2.4.4-p10 |
| GHSA-2ff6-837j-hg5x Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
No fix yet | |
| GHSA-2ff6-837j-hg5x Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
No fix yet | |
| GHSA-2ff6-837j-hg5x Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
No fix yet | |
| GHSA-8frp-pxq2-3gpq Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
No fix yet | |
| GHSA-8frp-pxq2-3gpq Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
>= 2.4.4-p1, < 2.4.4-p10 | 2.4.4-p10 |
| GHSA-8frp-pxq2-3gpq Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-8frp-pxq2-3gpq Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-8frp-pxq2-3gpq Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-8frp-pxq2-3gpq Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
No fix yet | |
| GHSA-8frp-pxq2-3gpq Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
No fix yet | |
| GHSA-8frp-pxq2-3gpq Magento OS Command ('OS Command Injection') vulnerability |
High EPSS 1.67% |
No fix yet | |
| GHSA-52fg-wjxm-pp44 Magento DOM-based Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-52fg-wjxm-pp44 Magento DOM-based Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.70% |
>= 2.4.4-p1, < 2.4.4-p10 | 2.4.4-p10 |
| GHSA-52fg-wjxm-pp44 Magento DOM-based Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.70% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-52fg-wjxm-pp44 Magento DOM-based Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.70% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-52fg-wjxm-pp44 Magento DOM-based Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.70% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-52fg-wjxm-pp44 Magento DOM-based Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-52fg-wjxm-pp44 Magento DOM-based Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-52fg-wjxm-pp44 Magento DOM-based Cross-Site Scripting (XSS) vulnerability |
High EPSS 0.70% |
No fix yet | |
| GHSA-7r99-8wqp-h7pc Magento Path Traversal vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-7r99-8wqp-h7pc Magento Path Traversal vulnerability |
High EPSS 0.91% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-7r99-8wqp-h7pc Magento Path Traversal vulnerability |
High EPSS 0.91% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-7r99-8wqp-h7pc Magento Path Traversal vulnerability |
High EPSS 0.91% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-7r99-8wqp-h7pc Magento Path Traversal vulnerability |
High EPSS 0.91% |
>= 2.4.4-p1, < 2.4.4-p10 | 2.4.4-p10 |
| GHSA-7r99-8wqp-h7pc Magento Path Traversal vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-7r99-8wqp-h7pc Magento Path Traversal vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-7r99-8wqp-h7pc Magento Path Traversal vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-q628-54wg-4r5q Magento does not properly restrict excessive authentication attempts |
High EPSS 0.86% |
No fix yet | |
| GHSA-q628-54wg-4r5q Magento does not properly restrict excessive authentication attempts |
High EPSS 0.86% |
No fix yet | |
| GHSA-q628-54wg-4r5q Magento does not properly restrict excessive authentication attempts |
High EPSS 0.86% |
>= 2.4.7-beta1, < 2.4.7-p2 | 2.4.7-p2 |
| GHSA-q628-54wg-4r5q Magento does not properly restrict excessive authentication attempts |
High EPSS 0.86% |
>= 2.4.6-p1, < 2.4.6-p7 | 2.4.6-p7 |
| GHSA-q628-54wg-4r5q Magento does not properly restrict excessive authentication attempts |
High EPSS 0.86% |
>= 2.4.5-p1, < 2.4.5-p9 | 2.4.5-p9 |
| GHSA-q628-54wg-4r5q Magento does not properly restrict excessive authentication attempts |
High EPSS 0.86% |
>= 2.4.4-p1, < 2.4.4-p10 | 2.4.4-p10 |
| GHSA-q628-54wg-4r5q Magento does not properly restrict excessive authentication attempts |
High EPSS 0.86% |
No fix yet | |
| GHSA-q628-54wg-4r5q Magento does not properly restrict excessive authentication attempts |
High EPSS 0.86% |
No fix yet | |
| GHSA-jmqp-r3gg-6jh3 Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
High EPSS 1.27% |
No fix yet | |
| GHSA-jmqp-r3gg-6jh3 Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
High EPSS 1.27% |
< 2.4.4-p9 | 2.4.4-p9 |
| GHSA-jmqp-r3gg-6jh3 Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
High EPSS 1.27% |
>= 2.4.5-p1, < 2.4.5-p8 | 2.4.5-p8 |
| GHSA-jmqp-r3gg-6jh3 Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
High EPSS 1.27% |
>= 2.4.6-p1, < 2.4.6-p6 | 2.4.6-p6 |
| GHSA-jmqp-r3gg-6jh3 Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
High EPSS 1.27% |
No fix yet | |
| GHSA-jmqp-r3gg-6jh3 Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
High EPSS 1.27% |
No fix yet | |
| GHSA-jmqp-r3gg-6jh3 Magento Open Source Server-Side Request Forgery (SSRF) vulnerability |
High EPSS 1.27% |
No fix yet | |
| GHSA-r7cm-g469-wm4g Magento Open Source Improper Access Control vulnerability |
Critical EPSS 1.13% |
No fix yet | |
| GHSA-r7cm-g469-wm4g Magento Open Source Improper Access Control vulnerability |
Critical EPSS 1.13% |
No fix yet | |
| GHSA-r7cm-g469-wm4g Magento Open Source Improper Access Control vulnerability |
Critical EPSS 1.13% |
No fix yet | |
| GHSA-r7cm-g469-wm4g Magento Open Source Improper Access Control vulnerability |
Critical EPSS 1.13% |
No fix yet | |
| GHSA-r7cm-g469-wm4g Magento Open Source Improper Access Control vulnerability |
Critical EPSS 1.13% |
< 2.4.4-p9 | 2.4.4-p9 |
| GHSA-r7cm-g469-wm4g Magento Open Source Improper Access Control vulnerability |
Critical EPSS 1.13% |
>= 2.4.5-p1, < 2.4.5-p8 | 2.4.5-p8 |
| GHSA-r7cm-g469-wm4g Magento Open Source Improper Access Control vulnerability |
Critical EPSS 1.13% |
>= 2.4.6-p1, < 2.4.6-p6 | 2.4.6-p6 |
| GHSA-p6h9-gx5g-wg64 Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.85% |
< 2.4.4-p9 | 2.4.4-p9 |
| GHSA-p6h9-gx5g-wg64 Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.85% |
No fix yet | |
| GHSA-p6h9-gx5g-wg64 Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.85% |
No fix yet | |
| GHSA-p6h9-gx5g-wg64 Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.85% |
No fix yet | |
| GHSA-p6h9-gx5g-wg64 Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.85% |
No fix yet | |
| GHSA-p6h9-gx5g-wg64 Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.85% |
>= 2.4.6-p1, < 2.4.6-p6 | 2.4.6-p6 |
| GHSA-p6h9-gx5g-wg64 Magento Open Source Incorrect Authorization vulnerability |
Medium EPSS 0.85% |
>= 2.4.5-p1, < 2.4.5-p8 | 2.4.5-p8 |
| GHSA-5632-wq7m-gfq9 Magento Open Source Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.67% |
< 2.4.4-p9 | 2.4.4-p9 |
| GHSA-5632-wq7m-gfq9 Magento Open Source Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.67% |
No fix yet | |
| GHSA-5632-wq7m-gfq9 Magento Open Source Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.67% |
No fix yet | |
| GHSA-5632-wq7m-gfq9 Magento Open Source Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.67% |
No fix yet | |
| GHSA-5632-wq7m-gfq9 Magento Open Source Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.67% |
No fix yet | |
| GHSA-5632-wq7m-gfq9 Magento Open Source Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.67% |
>= 2.4.6-p1, < 2.4.6-p6 | 2.4.6-p6 |
| GHSA-5632-wq7m-gfq9 Magento Open Source Cross-Site Scripting (XSS) vulnerability |
Medium EPSS 0.67% |
>= 2.4.5-p1, < 2.4.5-p8 | 2.4.5-p8 |
| GHSA-wwj3-573j-rvvm Magento Open Source Improper Authorization vulnerability |
High EPSS 0.79% |
< 2.4.4-p9 | 2.4.4-p9 |
| GHSA-wwj3-573j-rvvm Magento Open Source Improper Authorization vulnerability |
High EPSS 0.79% |
No fix yet | |
| GHSA-wwj3-573j-rvvm Magento Open Source Improper Authorization vulnerability |
High EPSS 0.79% |
No fix yet | |
| GHSA-wwj3-573j-rvvm Magento Open Source Improper Authorization vulnerability |
High EPSS 0.79% |
No fix yet | |
| GHSA-wwj3-573j-rvvm Magento Open Source Improper Authorization vulnerability |
High EPSS 0.79% |
No fix yet | |
| GHSA-wwj3-573j-rvvm Magento Open Source Improper Authorization vulnerability |
High EPSS 0.79% |
>= 2.4.6-p1, < 2.4.6-p6 | 2.4.6-p6 |
| GHSA-wwj3-573j-rvvm Magento Open Source Improper Authorization vulnerability |
High EPSS 0.79% |
>= 2.4.5-p1, < 2.4.5-p8 | 2.4.5-p8 |
| GHSA-f7q4-9gwv-6774 Magento Open Source Improper Authentication vulnerability |
High EPSS 0.91% |
>= 2.4.6-p1, < 2.4.6-p6 | 2.4.6-p6 |
| GHSA-f7q4-9gwv-6774 Magento Open Source Improper Authentication vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-f7q4-9gwv-6774 Magento Open Source Improper Authentication vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-f7q4-9gwv-6774 Magento Open Source Improper Authentication vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-f7q4-9gwv-6774 Magento Open Source Improper Authentication vulnerability |
High EPSS 0.91% |
No fix yet | |
| GHSA-f7q4-9gwv-6774 Magento Open Source Improper Authentication vulnerability |
High EPSS 0.91% |
< 2.4.4-p9 | 2.4.4-p9 |
| GHSA-f7q4-9gwv-6774 Magento Open Source Improper Authentication vulnerability |
High EPSS 0.91% |
>= 2.4.5-p1, < 2.4.5-p8 | 2.4.5-p8 |
| GHSA-m8cj-3v68-3cxj Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability Known exploited |
Critical EPSS 99.99% |
< 2.4.4-p9 | 2.4.4-p9 |
| GHSA-m8cj-3v68-3cxj Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability Known exploited |
Critical EPSS 99.99% |
No fix yet | |
| GHSA-m8cj-3v68-3cxj Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability Known exploited |
Critical EPSS 99.99% |
No fix yet | |
| GHSA-m8cj-3v68-3cxj Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability Known exploited |
Critical EPSS 99.99% |
No fix yet | |
| GHSA-m8cj-3v68-3cxj Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability Known exploited |
Critical EPSS 99.99% |
>= 2.4.5-p1, < 2.4.5-p8 | 2.4.5-p8 |
| GHSA-m8cj-3v68-3cxj Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability Known exploited |
Critical EPSS 99.99% |
>= 2.4.6-p1, < 2.4.6-p6 | 2.4.6-p6 |
| GHSA-m8cj-3v68-3cxj Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability Known exploited |
Critical EPSS 99.99% |
No fix yet | |
| GHSA-8j7c-682x-r9f2 Magento RCE,XSS and other vulnerabilities |
Critical | >= 2.1, < 2.1.16 | 2.1.16 |
| GHSA-8j7c-682x-r9f2 Magento RCE,XSS and other vulnerabilities |
Critical | >= 2.2, < 2.2.7 | 2.2.7 |
| GHSA-mcfc-67vm-j568 Magento Cross-Site Scripting (XSS) vulnerability |
Medium | >= 2.1, < 2.1.15 | 2.1.15 |
| GHSA-mcfc-67vm-j568 Magento Cross-Site Scripting (XSS) vulnerability |
Medium | >= 2.2, < 2.2.6 | 2.2.6 |
| GHSA-5gmh-85x8-5cx7 Magento remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities |
Critical | >= 2.2, < 2.2.5 | 2.2.5 |
| GHSA-5gmh-85x8-5cx7 Magento remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities |
Critical | >= 2.1, < 2.1.14 | 2.1.14 |
| GHSA-cv25-3pxr-4q7x Magento Open Source Security Advisory: Patch SUPEE-10975 |
Critical | >= 1.9.0.0, < 1.14.4.0 | 1.14.4.0 |
| GHSA-26hq-7286-mg8f Magento Patch SUPEE-9652 - Remote Code Execution using mail vulnerability |
Critical | >= 1.9.0.0, < 1.14.3.2 | 1.14.3.2 |
| GHSA-6wm4-3rjj-c8xx Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities |
Critical | >= 1.5.0.0, < 1.9.4.0 | 1.9.4.0 |
| GHSA-prpf-cj87-hwvr Magento Patch SUPEE-10752 - Multiple security enhancements vulnerabilities |
Critical | < 1.9.3.9 | 1.9.3.9 |
| GHSA-59vf-hjxc-f9c5 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 1.03% |
No fix yet | |
| GHSA-59vf-hjxc-f9c5 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 1.03% |
No fix yet | |
| GHSA-59vf-hjxc-f9c5 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 1.03% |
>= 2.4.4-p1, < 2.4.4-p8 | 2.4.4-p8 |
| GHSA-59vf-hjxc-f9c5 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 1.03% |
>= 2.4.5-p1, < 2.4.5-p7 | 2.4.5-p7 |
| GHSA-59vf-hjxc-f9c5 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 1.03% |
>= 2.4.6-p1, < 2.4.6-p5 | 2.4.6-p5 |
| GHSA-59vf-hjxc-f9c5 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 1.03% |
>= 2.4.7-beta1, < 2.4.7 | 2.4.7 |
| GHSA-59vf-hjxc-f9c5 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 1.03% |
No fix yet | |
| GHSA-wh4m-6rh3-p4rq Magento Open Source allows Improper Input Validation |
Critical EPSS 1.42% |
>= 2.4.4-p1, < 2.4.4-p8 | 2.4.4-p8 |
| GHSA-wh4m-6rh3-p4rq Magento Open Source allows Improper Input Validation |
Critical EPSS 1.42% |
>= 2.4.6-p1, < 2.4.6-p5 | 2.4.6-p5 |
| GHSA-wh4m-6rh3-p4rq Magento Open Source allows Improper Input Validation |
Critical EPSS 1.42% |
>= 2.4.7-beta1, < 2.4.7 | 2.4.7 |
| GHSA-wh4m-6rh3-p4rq Magento Open Source allows Improper Input Validation |
Critical EPSS 1.42% |
No fix yet | |
| GHSA-wh4m-6rh3-p4rq Magento Open Source allows Improper Input Validation |
Critical EPSS 1.42% |
No fix yet | |
| GHSA-wh4m-6rh3-p4rq Magento Open Source allows Improper Input Validation |
Critical EPSS 1.42% |
No fix yet | |
| GHSA-wh4m-6rh3-p4rq Magento Open Source allows Improper Input Validation |
Critical EPSS 1.42% |
>= 2.4.5-p1, < 2.4.5-p7 | 2.4.5-p7 |
| GHSA-525f-pvj5-vqmq Magento Open Source allows OS Command Injection |
Critical EPSS 3.69% |
>= 2.4.5-p1, < 2.4.5-p6 | 2.4.5-p6 |
| GHSA-525f-pvj5-vqmq Magento Open Source allows OS Command Injection |
Critical EPSS 3.69% |
No fix yet | |
| GHSA-525f-pvj5-vqmq Magento Open Source allows OS Command Injection |
Critical EPSS 3.69% |
No fix yet | |
| GHSA-525f-pvj5-vqmq Magento Open Source allows OS Command Injection |
Critical EPSS 3.69% |
>= 2.4.4-p1, < 2.4.4-p7 | 2.4.4-p7 |
| GHSA-525f-pvj5-vqmq Magento Open Source allows OS Command Injection |
Critical EPSS 3.69% |
No fix yet | |
| GHSA-525f-pvj5-vqmq Magento Open Source allows OS Command Injection |
Critical EPSS 3.69% |
>= 2.4.6-p1, < 2.4.6-p4 | 2.4.6-p4 |
| GHSA-264g-f7v8-q5qq Magento Open Source allows Cross-Site Scripting (XSS) |
Critical EPSS 1.31% |
No fix yet | |
| GHSA-264g-f7v8-q5qq Magento Open Source allows Cross-Site Scripting (XSS) |
Critical EPSS 1.31% |
>= 2.4.4-p1, < 2.4.4-p7 | 2.4.4-p7 |
| GHSA-264g-f7v8-q5qq Magento Open Source allows Cross-Site Scripting (XSS) |
Critical EPSS 1.31% |
>= 2.4.5-p1, < 2.4.5-p6 | 2.4.5-p6 |
| GHSA-264g-f7v8-q5qq Magento Open Source allows Cross-Site Scripting (XSS) |
Critical EPSS 1.31% |
No fix yet | |
| GHSA-264g-f7v8-q5qq Magento Open Source allows Cross-Site Scripting (XSS) |
Critical EPSS 1.31% |
No fix yet | |
| GHSA-264g-f7v8-q5qq Magento Open Source allows Cross-Site Scripting (XSS) |
Critical EPSS 1.31% |
>= 2.4.6-p1, < 2.4.6-p4 | 2.4.6-p4 |
| GHSA-hqgj-4396-hmxv Magento Open Source allows Cross-Site Request Forgery (CSRF) |
Medium EPSS 0.76% |
>= 2.4.4-p1, < 2.4.4-p7 | 2.4.4-p7 |
| GHSA-hqgj-4396-hmxv Magento Open Source allows Cross-Site Request Forgery (CSRF) |
Medium EPSS 0.76% |
No fix yet | |
| GHSA-hqgj-4396-hmxv Magento Open Source allows Cross-Site Request Forgery (CSRF) |
Medium EPSS 0.76% |
No fix yet | |
| GHSA-hqgj-4396-hmxv Magento Open Source allows Cross-Site Request Forgery (CSRF) |
Medium EPSS 0.76% |
No fix yet | |
| GHSA-hqgj-4396-hmxv Magento Open Source allows Cross-Site Request Forgery (CSRF) |
Medium EPSS 0.76% |
>= 2.4.6-p1, < 2.4.6-p4 | 2.4.6-p4 |
| GHSA-hqgj-4396-hmxv Magento Open Source allows Cross-Site Request Forgery (CSRF) |
Medium EPSS 0.76% |
>= 2.4.5-p1, < 2.4.5-p6 | 2.4.5-p6 |
| GHSA-c9h9-h5gf-885r Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.87% |
No fix yet | |
| GHSA-c9h9-h5gf-885r Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.87% |
No fix yet | |
| GHSA-c9h9-h5gf-885r Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.87% |
No fix yet | |
| GHSA-c9h9-h5gf-885r Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.87% |
>= 2.4.4-p1, < 2.4.4-p7 | 2.4.4-p7 |
| GHSA-c9h9-h5gf-885r Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.87% |
>= 2.4.5-p1, < 2.4.5-p6 | 2.4.5-p6 |
| GHSA-c9h9-h5gf-885r Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.87% |
>= 2.4.6-p1, < 2.4.6-p4 | 2.4.6-p4 |
| GHSA-7pfc-834q-h497 Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.76% |
>= 2.4.5-p1, < 2.4.5-p5 | 2.4.5-p5 |
| GHSA-7pfc-834q-h497 Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.76% |
>= 2.4.4-p1, < 2.4.4-p6 | 2.4.4-p6 |
| GHSA-7pfc-834q-h497 Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.76% |
>= 2.4.7-beta1, < 2.4.7-beta2 | 2.4.7-beta2 |
| GHSA-7pfc-834q-h497 Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.76% |
No fix yet | |
| GHSA-7pfc-834q-h497 Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.76% |
No fix yet | |
| GHSA-7pfc-834q-h497 Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.76% |
No fix yet | |
| GHSA-7pfc-834q-h497 Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.76% |
No fix yet | |
| GHSA-7pfc-834q-h497 Magento Open Source allows Uncontrolled Resource Consumption |
Medium EPSS 0.76% |
>= 2.4.6-p1, < 2.4.6-p3 | 2.4.6-p3 |
| GHSA-h3g9-cwr6-hphx Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
>= 2.4.4-p1, < 2.4.4-p6 | 2.4.4-p6 |
| GHSA-h3g9-cwr6-hphx Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
>= 2.4.6-p1, < 2.4.6-p3 | 2.4.6-p3 |
| GHSA-h3g9-cwr6-hphx Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
No fix yet | |
| GHSA-h3g9-cwr6-hphx Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
No fix yet | |
| GHSA-h3g9-cwr6-hphx Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
No fix yet | |
| GHSA-h3g9-cwr6-hphx Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
No fix yet | |
| GHSA-h3g9-cwr6-hphx Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
>= 2.4.7-beta1, < 2.4.7-beta2 | 2.4.7-beta2 |
| GHSA-h3g9-cwr6-hphx Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
>= 2.4.5-p1, < 2.4.5-p5 | 2.4.5-p5 |
| GHSA-rq36-9f5f-2gw7 Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
No fix yet | |
| GHSA-rq36-9f5f-2gw7 Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
>= 2.4.6-p1, < 2.4.6-p3 | 2.4.6-p3 |
| GHSA-rq36-9f5f-2gw7 Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
No fix yet | |
| GHSA-rq36-9f5f-2gw7 Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
No fix yet | |
| GHSA-rq36-9f5f-2gw7 Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
>= 2.4.4-p1, < 2.4.4-p6 | 2.4.4-p6 |
| GHSA-rq36-9f5f-2gw7 Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
No fix yet | |
| GHSA-rq36-9f5f-2gw7 Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
>= 2.4.7-beta1, < 2.4.7-beta2 | 2.4.7-beta2 |
| GHSA-rq36-9f5f-2gw7 Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
>= 2.4.5-p1, < 2.4.5-p5 | 2.4.5-p5 |
| GHSA-ggr8-3hwx-4f2m Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
>= 2.4.5-p1, < 2.4.5-p5 | 2.4.5-p5 |
| GHSA-ggr8-3hwx-4f2m Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
>= 2.4.6-p1, < 2.4.6-p3 | 2.4.6-p3 |
| GHSA-ggr8-3hwx-4f2m Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
No fix yet | |
| GHSA-ggr8-3hwx-4f2m Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
No fix yet | |
| GHSA-ggr8-3hwx-4f2m Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
No fix yet | |
| GHSA-ggr8-3hwx-4f2m Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
>= 2.4.7-beta1, < 2.4.7-beta2 | 2.4.7-beta2 |
| GHSA-ggr8-3hwx-4f2m Magento Open Source allows SQL Injection |
Medium EPSS 0.83% |
>= 2.4.4-p1, < 2.4.4-p6 | 2.4.4-p6 |
| GHSA-grc6-r6f8-xj7c Magento Open Source allows Improper Authorization |
High EPSS 0.80% |
>= 2.4.4-p1, < 2.4.4-p6 | 2.4.4-p6 |
| GHSA-grc6-r6f8-xj7c Magento Open Source allows Improper Authorization |
High EPSS 0.80% |
>= 2.4.6-p1, < 2.4.6-p3 | 2.4.6-p3 |
| GHSA-grc6-r6f8-xj7c Magento Open Source allows Improper Authorization |
High EPSS 0.80% |
No fix yet | |
| GHSA-grc6-r6f8-xj7c Magento Open Source allows Improper Authorization |
High EPSS 0.80% |
No fix yet | |
| GHSA-grc6-r6f8-xj7c Magento Open Source allows Improper Authorization |
High EPSS 0.80% |
No fix yet | |
| GHSA-grc6-r6f8-xj7c Magento Open Source allows Improper Authorization |
High EPSS 0.80% |
>= 2.4.7-beta1, < 2.4.7-beta2 | 2.4.7-beta2 |
| GHSA-grc6-r6f8-xj7c Magento Open Source allows Improper Authorization |
High EPSS 0.80% |
>= 2.4.5-p1, < 2.4.5-p5 | 2.4.5-p5 |
| GHSA-3j7w-jp46-9752 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 0.75% |
No fix yet | |
| GHSA-3j7w-jp46-9752 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 0.75% |
>= 2.4.6-p1, < 2.4.6-p3 | 2.4.6-p3 |
| GHSA-3j7w-jp46-9752 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 0.75% |
No fix yet | |
| GHSA-3j7w-jp46-9752 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 0.75% |
>= 2.4.4-p1, < 2.4.4-p6 | 2.4.4-p6 |
| GHSA-3j7w-jp46-9752 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 0.75% |
>= 2.4.5-p1, < 2.4.5-p5 | 2.4.5-p5 |
| GHSA-3j7w-jp46-9752 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 0.75% |
>= 2.4.7-beta1, < 2.4.7-beta2 | 2.4.7-beta2 |
| GHSA-3j7w-jp46-9752 Magento Open Source allows Cross-Site Scripting (XSS) |
High EPSS 0.75% |
No fix yet | |
| GHSA-rpc7-gf58-v3x2 Magento Open Source allows Incorrect Authorization |
High EPSS 0.88% |
No fix yet | |
| GHSA-rpc7-gf58-v3x2 Magento Open Source allows Incorrect Authorization |
High EPSS 0.88% |
>= 2.4.6-p1, < 2.4.6-p3 | 2.4.6-p3 |
| GHSA-rpc7-gf58-v3x2 Magento Open Source allows Incorrect Authorization |
High EPSS 0.88% |
>= 2.4.5-p1, < 2.4.5-p5 | 2.4.5-p5 |
| GHSA-rpc7-gf58-v3x2 Magento Open Source allows Incorrect Authorization |
High EPSS 0.88% |
>= 2.4.4-p1, < 2.4.4-p6 | 2.4.4-p6 |
| GHSA-rpc7-gf58-v3x2 Magento Open Source allows Incorrect Authorization |
High EPSS 0.88% |
>= 2.4.7-beta1, < 2.4.7-beta2 | 2.4.7-beta2 |
| GHSA-rpc7-gf58-v3x2 Magento Open Source allows Incorrect Authorization |
High EPSS 0.88% |
No fix yet | |
| GHSA-rpc7-gf58-v3x2 Magento Open Source allows Incorrect Authorization |
High EPSS 0.88% |
No fix yet | |
| GHSA-9mx6-4gg4-85xj Magento Open Source has Improper Input Validation Vulnerability |
Medium EPSS 0.80% |
No fix yet | |
| GHSA-9mx6-4gg4-85xj Magento Open Source has Improper Input Validation Vulnerability |
Medium EPSS 0.80% |
>= 2.4.7-beta1, < 2.4.7-beta2 | 2.4.7-beta2 |
| GHSA-9mx6-4gg4-85xj Magento Open Source has Improper Input Validation Vulnerability |
Medium EPSS 0.80% |
>= 2.4.6-p1, < 2.4.6-p3 | 2.4.6-p3 |
| GHSA-9mx6-4gg4-85xj Magento Open Source has Improper Input Validation Vulnerability |
Medium EPSS 0.80% |
>= 2.4.5-p1, < 2.4.5-p5 | 2.4.5-p5 |
| GHSA-9mx6-4gg4-85xj Magento Open Source has Improper Input Validation Vulnerability |
Medium EPSS 0.80% |
>= 2.4.4-p1, < 2.4.4-p6 | 2.4.4-p6 |
| GHSA-9mx6-4gg4-85xj Magento Open Source has Improper Input Validation Vulnerability |
Medium EPSS 0.80% |
No fix yet | |
| GHSA-9mx6-4gg4-85xj Magento Open Source has Improper Input Validation Vulnerability |
Medium EPSS 0.80% |
No fix yet | |
| GHSA-9mx6-4gg4-85xj Magento Open Source has Improper Input Validation Vulnerability |
Medium EPSS 0.80% |
No fix yet | |
| GHSA-8jxc-5f94-22vh Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.86% |
>= 2.4.7-beta1, < 2.4.7-beta2 | 2.4.7-beta2 |
| GHSA-8jxc-5f94-22vh Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.86% |
>= 2.4.5-p1, < 2.4.5-p5 | 2.4.5-p5 |
| GHSA-8jxc-5f94-22vh Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.86% |
>= 2.4.4-p1, < 2.4.4-p6 | 2.4.4-p6 |
| GHSA-8jxc-5f94-22vh Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.86% |
No fix yet | |
| GHSA-8jxc-5f94-22vh Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.86% |
No fix yet | |
| GHSA-8jxc-5f94-22vh Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.86% |
No fix yet | |
| GHSA-8jxc-5f94-22vh Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.86% |
No fix yet | |
| GHSA-8jxc-5f94-22vh Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.86% |
>= 2.4.6-p1, < 2.4.6-p3 | 2.4.6-p3 |
| GHSA-5xmp-7wg5-x68q Magento Open Source affected by Improper Input Validation |
High EPSS 1.51% |
>= 2.4.3-p1, < 2.4.3-p2 | 2.4.3-p2 |
| GHSA-5xmp-7wg5-x68q Magento Open Source affected by Improper Input Validation |
High EPSS 1.51% |
No fix yet | |
| GHSA-5xmp-7wg5-x68q Magento Open Source affected by Improper Input Validation |
High EPSS 1.51% |
No fix yet | |
| GHSA-5xmp-7wg5-x68q Magento Open Source affected by Improper Input Validation |
High EPSS 1.51% |
>= 2.3.7-p1, < 2.3.7-p3 | 2.3.7-p3 |
| GHSA-wqr6-wv6c-p8fx Magento improper access control vulnerability within Magento's Media Gallery Upload workflow |
High EPSS 2.12% |
No fix yet | |
| GHSA-wqr6-wv6c-p8fx Magento improper access control vulnerability within Magento's Media Gallery Upload workflow |
High EPSS 2.12% |
>= 2.4.2-p1, < 2.4.2-p2 | 2.4.2-p2 |
| GHSA-wqr6-wv6c-p8fx Magento improper access control vulnerability within Magento's Media Gallery Upload workflow |
High EPSS 2.12% |
No fix yet | |
| GHSA-wqr6-wv6c-p8fx Magento improper access control vulnerability within Magento's Media Gallery Upload workflow |
High EPSS 2.12% |
< 2.3.7-p1 | 2.3.7-p1 |
| GHSA-8cjg-f53m-8m9q Magento XML Injection vulnerability in the Widgets Update Layout |
High EPSS 2.37% |
< 2.3.7-p1 | 2.3.7-p1 |
| GHSA-8cjg-f53m-8m9q Magento XML Injection vulnerability in the Widgets Update Layout |
High EPSS 2.37% |
>= 2.4.2-p1, < 2.4.2-p2 | 2.4.2-p2 |
| GHSA-8cjg-f53m-8m9q Magento XML Injection vulnerability in the Widgets Update Layout |
High EPSS 2.37% |
No fix yet | |
| GHSA-8cjg-f53m-8m9q Magento XML Injection vulnerability in the Widgets Update Layout |
High EPSS 2.37% |
No fix yet | |
| GHSA-4g27-q2w9-m8m8 Magento affected by remote code execution vulnerability in the CMS page scheduled update feature |
High EPSS 2.01% |
No fix yet | |
| GHSA-4g27-q2w9-m8m8 Magento affected by remote code execution vulnerability in the CMS page scheduled update feature |
High EPSS 2.01% |
No fix yet | |
| GHSA-4g27-q2w9-m8m8 Magento affected by remote code execution vulnerability in the CMS page scheduled update feature |
High EPSS 2.01% |
< 2.3.7-p1 | 2.3.7-p1 |
| GHSA-4g27-q2w9-m8m8 Magento affected by remote code execution vulnerability in the CMS page scheduled update feature |
High EPSS 2.01% |
>= 2.4.2-p1, < 2.4.2-p2 | 2.4.2-p2 |
| GHSA-3vg2-v639-6ch9 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.97% |
>= 2.4.4-p1, < 2.4.4-p5 | 2.4.4-p5 |
| GHSA-3vg2-v639-6ch9 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.97% |
No fix yet | |
| GHSA-3vg2-v639-6ch9 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.97% |
No fix yet | |
| GHSA-3vg2-v639-6ch9 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.97% |
>= 2.4.6-p1, < 2.4.6-p2 | 2.4.6-p2 |
| GHSA-3vg2-v639-6ch9 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.97% |
No fix yet | |
| GHSA-3vg2-v639-6ch9 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.97% |
>= 2.4.5-p1, < 2.4.5-p4 | 2.4.5-p4 |
| GHSA-mxc9-g6m4-2v35 Magento Open Source allows Improper Neutralization of Special Elements Used |
High EPSS 2.55% |
>= 2.4.4-p1, < 2.4.4-p5 | 2.4.4-p5 |
| GHSA-mxc9-g6m4-2v35 Magento Open Source allows Improper Neutralization of Special Elements Used |
High EPSS 2.55% |
>= 2.4.5-p1, < 2.4.5-p4 | 2.4.5-p4 |
| GHSA-mxc9-g6m4-2v35 Magento Open Source allows Improper Neutralization of Special Elements Used |
High EPSS 2.55% |
>= 2.4.6-p1, < 2.4.6-p2 | 2.4.6-p2 |
| GHSA-mxc9-g6m4-2v35 Magento Open Source allows Improper Neutralization of Special Elements Used |
High EPSS 2.55% |
No fix yet | |
| GHSA-mxc9-g6m4-2v35 Magento Open Source allows Improper Neutralization of Special Elements Used |
High EPSS 2.55% |
No fix yet | |
| GHSA-mxc9-g6m4-2v35 Magento Open Source allows Improper Neutralization of Special Elements Used |
High EPSS 2.55% |
No fix yet | |
| GHSA-rpv2-g4pc-wp72 Magento Open Source allows XML Injection |
High EPSS 1.07% |
No fix yet | |
| GHSA-rpv2-g4pc-wp72 Magento Open Source allows XML Injection |
High EPSS 1.07% |
>= 2.4.4-p1, < 2.4.4-p5 | 2.4.4-p5 |
| GHSA-rpv2-g4pc-wp72 Magento Open Source allows XML Injection |
High EPSS 1.07% |
No fix yet | |
| GHSA-rpv2-g4pc-wp72 Magento Open Source allows XML Injection |
High EPSS 1.07% |
No fix yet | |
| GHSA-rpv2-g4pc-wp72 Magento Open Source allows XML Injection |
High EPSS 1.07% |
>= 2.4.6-p1, < 2.4.6-p2 | 2.4.6-p2 |
| GHSA-rpv2-g4pc-wp72 Magento Open Source allows XML Injection |
High EPSS 1.07% |
>= 2.4.5-p1, < 2.4.5-p4 | 2.4.5-p4 |
| GHSA-gfmm-ww6f-5mm5 Magento Open Source allows Improper Neutralization of Special Elements Used |
High EPSS 1.35% |
No fix yet | |
| GHSA-gfmm-ww6f-5mm5 Magento Open Source allows Improper Neutralization of Special Elements Used |
High EPSS 1.35% |
No fix yet | |
| GHSA-gfmm-ww6f-5mm5 Magento Open Source allows Improper Neutralization of Special Elements Used |
High EPSS 1.35% |
>= 2.4.5-p1, < 2.4.5-p3 | 2.4.5-p3 |
| GHSA-gfmm-ww6f-5mm5 Magento Open Source allows Improper Neutralization of Special Elements Used |
High EPSS 1.35% |
>= 2.4.4-p1, < 2.4.4-p4 | 2.4.4-p4 |
| GHSA-gfmm-ww6f-5mm5 Magento Open Source allows Improper Neutralization of Special Elements Used |
High EPSS 1.35% |
No fix yet | |
| GHSA-3qr4-w96f-672v Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
No fix yet | |
| GHSA-3qr4-w96f-672v Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
>= 2.4.4-p1, < 2.4.4-p4 | 2.4.4-p4 |
| GHSA-3qr4-w96f-672v Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
>= 2.4.5-p1, < 2.4.5-p3 | 2.4.5-p3 |
| GHSA-3qr4-w96f-672v Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
No fix yet | |
| GHSA-3qr4-w96f-672v Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
No fix yet | |
| GHSA-354h-fpmq-68v7 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
>= 2.4.5-p1, < 2.4.5-p3 | 2.4.5-p3 |
| GHSA-354h-fpmq-68v7 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
No fix yet | |
| GHSA-354h-fpmq-68v7 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
>= 2.4.4-p1, < 2.4.4-p4 | 2.4.4-p4 |
| GHSA-354h-fpmq-68v7 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
No fix yet | |
| GHSA-354h-fpmq-68v7 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
No fix yet | |
| GHSA-28vp-39rf-3q2j Magento Open Source has Business Logic Errors Vulnerability |
Medium EPSS 0.74% |
>= 2.4.4-p1, < 2.4.4-p4 | 2.4.4-p4 |
| GHSA-28vp-39rf-3q2j Magento Open Source has Business Logic Errors Vulnerability |
Medium EPSS 0.74% |
No fix yet | |
| GHSA-28vp-39rf-3q2j Magento Open Source has Business Logic Errors Vulnerability |
Medium EPSS 0.74% |
No fix yet | |
| GHSA-28vp-39rf-3q2j Magento Open Source has Business Logic Errors Vulnerability |
Medium EPSS 0.74% |
>= 2.4.5-p1, < 2.4.5-p3 | 2.4.5-p3 |
| GHSA-28vp-39rf-3q2j Magento Open Source has Business Logic Errors Vulnerability |
Medium EPSS 0.74% |
No fix yet | |
| GHSA-66c9-xrwj-9xv6 Magento Open Source affected by Improper Input Validation |
Low EPSS 1.01% |
No fix yet | |
| GHSA-66c9-xrwj-9xv6 Magento Open Source affected by Improper Input Validation |
Low EPSS 1.01% |
>= 2.4.4-p1, < 2.4.4-p4 | 2.4.4-p4 |
| GHSA-66c9-xrwj-9xv6 Magento Open Source affected by Improper Input Validation |
Low EPSS 1.01% |
>= 2.4.5-p1, < 2.4.5-p3 | 2.4.5-p3 |
| GHSA-66c9-xrwj-9xv6 Magento Open Source affected by Improper Input Validation |
Low EPSS 1.01% |
No fix yet | |
| GHSA-66c9-xrwj-9xv6 Magento Open Source affected by Improper Input Validation |
Low EPSS 1.01% |
No fix yet | |
| GHSA-4588-7x48-jrgj Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.95% |
No fix yet | |
| GHSA-4588-7x48-jrgj Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.95% |
No fix yet | |
| GHSA-4588-7x48-jrgj Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.95% |
>= 2.4.5-p1, < 2.4.5-p3 | 2.4.5-p3 |
| GHSA-4588-7x48-jrgj Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.95% |
>= 2.4.4-p1, < 2.4.4-p4 | 2.4.4-p4 |
| GHSA-4588-7x48-jrgj Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 0.95% |
No fix yet | |
| GHSA-5f79-vhr4-vw2r Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 1.09% |
No fix yet | |
| GHSA-5f79-vhr4-vw2r Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 1.09% |
>= 2.4.4-p1, < 2.4.4-p4 | 2.4.4-p4 |
| GHSA-5f79-vhr4-vw2r Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 1.09% |
>= 2.4.5-p1, < 2.4.5-p3 | 2.4.5-p3 |
| GHSA-5f79-vhr4-vw2r Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 1.09% |
No fix yet | |
| GHSA-5f79-vhr4-vw2r Magento Open Source allows Server-Side Request Forgery (SSRF) |
Medium EPSS 1.09% |
No fix yet | |
| GHSA-qw5m-vmp3-f553 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.63% |
>= 2.4.4-p1, < 2.4.4-p4 | 2.4.4-p4 |
| GHSA-qw5m-vmp3-f553 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-qw5m-vmp3-f553 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-qw5m-vmp3-f553 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.63% |
No fix yet | |
| GHSA-qw5m-vmp3-f553 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.63% |
>= 2.4.5-p1, < 2.4.5-p3 | 2.4.5-p3 |
| GHSA-wh42-8r2w-873x Magento Open Source allows XML Injection |
Medium EPSS 0.88% |
>= 2.4.5-p1, < 2.4.5-p3 | 2.4.5-p3 |
| GHSA-wh42-8r2w-873x Magento Open Source allows XML Injection |
Medium EPSS 0.88% |
>= 2.4.4-p1, < 2.4.4-p4 | 2.4.4-p4 |
| GHSA-wh42-8r2w-873x Magento Open Source allows XML Injection |
Medium EPSS 0.88% |
No fix yet | |
| GHSA-wh42-8r2w-873x Magento Open Source allows XML Injection |
Medium EPSS 0.88% |
No fix yet | |
| GHSA-wh42-8r2w-873x Magento Open Source allows XML Injection |
Medium EPSS 0.88% |
No fix yet | |
| GHSA-f989-3fp9-q3r2 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
No fix yet | |
| GHSA-f989-3fp9-q3r2 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
No fix yet | |
| GHSA-f989-3fp9-q3r2 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
>= 2.4.4-p1, < 2.4.4-p4 | 2.4.4-p4 |
| GHSA-f989-3fp9-q3r2 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
>= 2.4.5-p1, < 2.4.5-p3 | 2.4.5-p3 |
| GHSA-f989-3fp9-q3r2 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.65% |
No fix yet | |
| GHSA-85m4-g9vq-xpxj Magento Open Source allows Information Exposure |
Medium EPSS 0.71% |
No fix yet | |
| GHSA-85m4-g9vq-xpxj Magento Open Source allows Information Exposure |
Medium EPSS 0.71% |
>= 2.4.4-p1, < 2.4.4-p4 | 2.4.4-p4 |
| GHSA-85m4-g9vq-xpxj Magento Open Source allows Information Exposure |
Medium EPSS 0.71% |
>= 2.4.5-p1, < 2.4.5-p3 | 2.4.5-p3 |
| GHSA-85m4-g9vq-xpxj Magento Open Source allows Information Exposure |
Medium EPSS 0.71% |
No fix yet | |
| GHSA-85m4-g9vq-xpxj Magento Open Source allows Information Exposure |
Medium EPSS 0.71% |
No fix yet | |
| GHSA-5jfg-phx7-7fxg Magento Open Source affected by Improper Input Validation |
High EPSS 1.02% |
>= 2.4.5-p1, < 2.4.5-p3 | 2.4.5-p3 |
| GHSA-5jfg-phx7-7fxg Magento Open Source affected by Improper Input Validation |
High EPSS 1.02% |
No fix yet | |
| GHSA-5jfg-phx7-7fxg Magento Open Source affected by Improper Input Validation |
High EPSS 1.02% |
No fix yet | |
| GHSA-5jfg-phx7-7fxg Magento Open Source affected by Improper Input Validation |
High EPSS 1.02% |
No fix yet | |
| GHSA-5jfg-phx7-7fxg Magento Open Source affected by Improper Input Validation |
High EPSS 1.02% |
>= 2.4.4-p1, < 2.4.5-p4 | 2.4.5-p4 |
| GHSA-2wm7-mmgc-qxr3 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.56% |
>= 2.4.5-p1, < 2.4.5-p2 | 2.4.5-p2 |
| GHSA-2wm7-mmgc-qxr3 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.56% |
>= 2.4.4-p1, < 2.4.4-p3 | 2.4.4-p3 |
| GHSA-2wm7-mmgc-qxr3 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.56% |
No fix yet | |
| GHSA-2wm7-mmgc-qxr3 Magento Open Source allows Incorrect Authorization |
Medium EPSS 0.56% |
No fix yet | |
| GHSA-4h7p-4vq8-g2gh Magento Open Source allows Improper Access Control |
Medium EPSS 0.96% |
>= 2.4.4-p1, < 2.4.4-p3 | 2.4.4-p3 |
| GHSA-4h7p-4vq8-g2gh Magento Open Source allows Improper Access Control |
Medium EPSS 0.96% |
No fix yet | |
| GHSA-4h7p-4vq8-g2gh Magento Open Source allows Improper Access Control |
Medium EPSS 0.96% |
No fix yet | |
| GHSA-4h7p-4vq8-g2gh Magento Open Source allows Improper Access Control |
Medium EPSS 0.96% |
>= 2.4.5-p1, < 2.4.5-p2 | 2.4.5-p2 |
| GHSA-fxcr-gvcw-hmqm Magento Open Source allows Cross-Site Scripting (XSS) |
Medium EPSS 58.47% |
No fix yet | |
| GHSA-fxcr-gvcw-hmqm Magento Open Source allows Cross-Site Scripting (XSS) |
Medium EPSS 58.47% |
>= 2.4.4-p1, <= 2.4.4-p2 | No fix yet |
| GHSA-fxcr-gvcw-hmqm Magento Open Source allows Cross-Site Scripting (XSS) |
Medium EPSS 58.47% |
No fix yet | |
| GHSA-fxcr-gvcw-hmqm Magento Open Source allows Cross-Site Scripting (XSS) |
Medium EPSS 58.47% |
No fix yet | |
| GHSA-2444-8gj8-6fmx Magento Open Source allows XML Injection |
High EPSS 0.93% |
No fix yet | |
| GHSA-2444-8gj8-6fmx Magento Open Source allows XML Injection |
High EPSS 0.93% |
>= 2.4.5-p1, < 2.4.5-p2 | 2.4.5-p2 |
| GHSA-2444-8gj8-6fmx Magento Open Source allows XML Injection |
High EPSS 0.93% |
No fix yet | |
| GHSA-2444-8gj8-6fmx Magento Open Source allows XML Injection |
High EPSS 0.93% |
>= 2.4.4-p1, < 2.4.4-p3 | 2.4.4-p3 |
| GHSA-297f-r9w7-w492 Magento Improper input validation vulnerability |
High EPSS 1.32% |
>= 2.4.4, < 2.4.5 | 2.4.5 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor