.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

magento/community-edition 2.4.6-p11 vulnerabilities

360 advisories known · magento/community-edition@2.4.6-p11 · 12 affect this release · Dependencies not checked · showing 60 more

SEVERITYADVISORYPUBLISHED

Does not affect 2.4.6-p11

SEVERITYADVISORYPUBLISHED

MediumMagento 2 Community Edition XSS VulnerabilityGHSA-ccjm-rgm5-rjjhCVE-2019-7880Affected >=2.1 <2.1.18, >=2.2 <2.2.9, >=2.3 <2.3.2, 2.1.0-rc1 - 2.1.0-rc3Fixed in 2.1.18 Fixed in 2.2.9 Fixed in 2.3.2OSV source ↗4 years ago

MediumMagento 2 Community Edition Cross-site Scripting VulnerabilityGHSA-rj8f-g5gm-jw5cCVE-2019-7887Affected >=2.1.0 <2.1.18, >=2.2.0 <2.2.9, >=2.3.0 <2.3.2Fixed in 2.1.18 Fixed in 2.2.9 Fixed in 2.3.2OSV source ↗4 years ago

MediumMagento Stored Cross-site Scripting vulnerability in the admin panelGHSA-9f4p-3jgf-98f5CVE-2019-7869Affected >=2.1.0 <2.1.18, >=2.2.0 <2.2.9, >=2.3.0 <2.3.2Fixed in 2.1.18 Fixed in 2.2.9 Fixed in 2.3.2OSV source ↗4 years ago

MediumMagento Cross-site Scripting in the admin panelGHSA-g4jh-vxqm-6fffCVE-2019-7868Affected >=2.1.0 <2.1.18, >=2.2.0 <2.2.9, >=2.3.0 <2.3.2Fixed in 2.1.18 Fixed in 2.2.9 Fixed in 2.3.2OSV source ↗4 years ago

MediumMagento Stored cross-site scripting in admin panelGHSA-p8gw-x2p7-vc73CVE-2019-7863Affected >=2.1 <2.1.18, >=2.2 <2.2.9, >=2.3 <2.3.2, 2.1.0-rc1 - 2.1.0-rc3Fixed in 2.1.18 Fixed in 2.2.9 Fixed in 2.3.2OSV source ↗4 years ago

MediumMagento 2 Community Edition Cross-site Scripting VulnerabilityGHSA-qmwh-rh2g-3682CVE-2019-7875Affected >=2.1.0 <2.1.18, >=2.2.0 <2.2.9, >=2.3.0 <2.3.2Fixed in 2.1.18 Fixed in 2.2.9 Fixed in 2.3.2OSV source ↗4 years ago

MediumMagento 2 Community Edition XSS VulnerabilityGHSA-3ccx-7588-r6c6CVE-2019-7866Affected >=2.1.0 <2.1.18, >=2.2.0 <2.2.9, >=2.3.0 <2.3.2Fixed in 2.1.18 Fixed in 2.2.9 Fixed in 2.3.2OSV source ↗4 years ago

MediumMagento 2 Community Edition XSS VulnerabilityGHSA-m3v2-r236-5xgqCVE-2019-7862Affected >=2.1.0 <2.1.18, >=2.2.0 <2.2.9, >=2.3.0 <2.3.2Fixed in 2.1.18 Fixed in 2.2.9 Fixed in 2.3.2OSV source ↗4 years ago

MediumMagento 2 Community Edition XSS VulnerabilityGHSA-vx2g-f45p-j674CVE-2019-7867Affected >=2.1.0 <2.1.18, >=2.2.0 <2.2.9, >=2.3.0 <2.3.2Fixed in 2.1.18 Fixed in 2.2.9 Fixed in 2.3.2OSV source ↗4 years ago

MediumMagento 2 Community Edition XSS VulnerabilityGHSA-mjgf-xmrr-6gvxCVE-2019-7853Affected >=2.1.0 <2.1.18, >=2.2.0 <2.2.9, >=2.3.0 <2.3.2Fixed in 2.1.18 Fixed in 2.2.9 Fixed in 2.3.2OSV source ↗4 years ago

MediumMagento Security feature bypassGHSA-8hcx-xvww-6c6hCVE-2025-49550Affected <2.4.5-p13, >=2.4.6-p1 <2.4.6-p11, >=2.4.7-beta1 <2.4.7-p6, ==2.4.6, ==2.4.8Fixed in 2.4.5-p13 Fixed in 2.4.6-p11 Fixed in 2.4.7-p6OSV source ↗last year

MediumMagento Improper Authorization vulnerabilityGHSA-rr2g-rrjj-xw86CVE-2025-27188Affected <2.4.4-p13, >=2.4.5-p1 <2.4.5-p12, >=2.4.6-p1 <2.4.6-p10, >=2.4.7-p1 <2.4.7-p5, >=2.4.8-beta1 <2.4.8, ==2.4.5, ==2.4.6, ==2.4.7Fixed in 2.4.4-p13 Fixed in 2.4.5-p12 Fixed in 2.4.6-p10 Fixed in 2.4.7-p5 Fixed in 2.4.8OSV source ↗2 years ago

MediumMagento Improper Access Control vulnerabilityGHSA-82p4-55gj-956pCVE-2025-24435Affected <2.4.4-p12, >=2.4.5-p1 <2.4.5-p11, >=2.4.6-p1 <2.4.6-p9, >=2.4.7-beta1 <2.4.7-p4, ==2.4.5, ==2.4.6, ==2.4.8-beta1Fixed in 2.4.4-p12 Fixed in 2.4.5-p11 Fixed in 2.4.6-p9 Fixed in 2.4.7-p4OSV source ↗2 years ago

MediumMagento Improper Access Control vulnerabilityGHSA-ghpr-6qhr-rpp8CVE-2025-24436Affected <2.4.4-p12, >=2.4.5-p1 <2.4.5-p11, >=2.4.6-p1 <2.4.6-p9, >=2.4.7-beta1 <2.4.7-p4, ==2.4.5, ==2.4.6, ==2.4.8-beta1Fixed in 2.4.4-p12 Fixed in 2.4.5-p11 Fixed in 2.4.6-p9 Fixed in 2.4.7-p4OSV source ↗2 years ago

MediumMagento Incorrect Authorization vulnerabilityGHSA-v6r2-425c-hfrrCVE-2025-24421Affected <2.4.4-p12, >=2.4.5-p1 <2.4.5-p11, >=2.4.6-p1 <2.4.6-p9, >=2.4.7-beta1 <2.4.7-p4, ==2.4.5, ==2.4.6, ==2.4.8-beta1Fixed in 2.4.4-p12 Fixed in 2.4.5-p11 Fixed in 2.4.6-p9 Fixed in 2.4.7-p4OSV source ↗2 years ago

MediumMagento Open Source Improper Access Control vulnerabilityGHSA-2qhq-fw98-h6wgCVE-2024-45121Affected <2.4.4-p11, >=2.4.5-p1 <2.4.5-p10, >=2.4.6-p1 <2.4.6-p8, >=2.4.7-beta1 <2.4.7-p3, ==2.4.5, ==2.4.6Fixed in 2.4.4-p11 Fixed in 2.4.5-p10 Fixed in 2.4.6-p8 Fixed in 2.4.7-p3OSV source ↗2 years ago

MediumMagento Open Source Improper Access Control vulnerabilityGHSA-46fm-x82m-5f74CVE-2024-45122Affected <2.4.4-p11, >=2.4.5-p1 <2.4.5-p10, >=2.4.6-p1 <2.4.6-p8, >=2.4.7-beta1 <2.4.7-p3, ==2.4.5, ==2.4.6Fixed in 2.4.4-p11 Fixed in 2.4.5-p10 Fixed in 2.4.6-p8 Fixed in 2.4.7-p3OSV source ↗2 years ago

MediumMagento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerabilityGHSA-47jp-46c9-25vfCVE-2024-45120Affected <2.4.4-p11, >=2.4.5-p1 <2.4.5-p10, >=2.4.6-p1 <2.4.6-p8, >=2.4.7-beta1 <2.4.7-p3, ==2.4.5, ==2.4.6Fixed in 2.4.4-p11 Fixed in 2.4.5-p10 Fixed in 2.4.6-p8 Fixed in 2.4.7-p3OSV source ↗2 years ago

MediumMagento Open Source Improper Access Control vulnerabilityGHSA-m58h-998x-66f3BIT-magento-2024-45129CVE-2024-45129Affected <2.4.4-p11, >=2.4.5-p1 <2.4.5-p10, >=2.4.6-p1 <2.4.6-p8, >=2.4.7-beta1 <2.4.7-p3, ==2.4.5, ==2.4.6Fixed in 2.4.4-p11 Fixed in 2.4.5-p10 Fixed in 2.4.6-p8 Fixed in 2.4.7-p3OSV source ↗2 years ago

MediumMagento Open Source Improper Access Control vulnerabilityGHSA-v3v6-jfvw-m576BIT-magento-2024-45130CVE-2024-45130Affected <2.4.4-p11, >=2.4.5-p1 <2.4.5-p10, >=2.4.6-p1 <2.4.6-p8, >=2.4.7-beta1 <2.4.7-p3, ==2.4.5, ==2.4.6Fixed in 2.4.4-p11 Fixed in 2.4.5-p10 Fixed in 2.4.6-p8 Fixed in 2.4.7-p3OSV source ↗2 years ago

MediumMagento Open Source Incorrect Authorization vulnerabilityGHSA-xg36-8c2v-jpxhBIT-magento-2024-45125CVE-2024-45125Affected <2.4.4-p11, >=2.4.5-p1 <2.4.5-p10, >=2.4.6-p1 <2.4.6-p8, >=2.4.7-beta1 <2.4.7-p3, ==2.4.5, ==2.4.6Fixed in 2.4.4-p11 Fixed in 2.4.5-p10 Fixed in 2.4.6-p8 Fixed in 2.4.7-p3OSV source ↗2 years ago

MediumMagento Open Source Cross-Site Request Forgery (CSRF) vulnerabilityGHSA-4323-f82v-f6jrCVE-2024-39410Affected <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-p1 <2.4.7-p2, ==2.4.5, ==2.4.6, ==2.4.7Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Open Source Cross-Site Request Forgery vulnerabilityGHSA-4cj6-f32v-6hgxCVE-2024-39408Affected <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-p1 <2.4.7-p2, ==2.4.5, ==2.4.6, ==2.4.7Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Improper Authorization leads to Security feature bypassGHSA-4xgg-rw35-7mv5CVE-2024-39416Affected <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-beta1 <2.4.7-p2, ==2.4.5, ==2.4.6Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Improper Authorization leads to Security feature bypassGHSA-4xmj-f664-hv98CVE-2024-39417Affected <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-beta1 <2.4.7-p2, ==2.4.5, ==2.4.6Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Open Source Improper Authorization vulnerabilityGHSA-7472-vw39-g2j3CVE-2024-39412Affected <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-p1 <2.4.7-p2, ==2.4.5, ==2.4.6, ==2.4.7Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Improper Access Control Leads to Privilege escalationGHSA-74w7-cr4v-wf2vCVE-2024-39419Affected <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-beta1 <2.4.7-p2, ==2.4.5, ==2.4.6Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Improper Authorization vulnerabilityGHSA-8w5f-8992-g86jCVE-2024-39413Affected >=2.4.4-p1 <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-beta1 <2.4.7-p2, ==2.4.4, ==2.4.5, ==2.4.6Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Improper Authorization vulnerabilityGHSA-cjm6-8mw8-2f8cCVE-2024-39407Affected >=2.4.4-p1 <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-beta1 <2.4.7-p2, ==2.4.4, ==2.4.5, ==2.4.6Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Improper Authorization Leading to Security feature bypassGHSA-gj93-84g5-mcjqCVE-2024-39415Affected <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-beta1 <2.4.7-p2, ==2.4.5, ==2.4.6Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Improper Authorization leads to security feature bypassGHSA-qm77-mqf3-fmhqCVE-2024-39411Affected <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-beta1 <2.4.7-p2, ==2.4.5, ==2.4.6Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Open Source Cross-Site Request Forgery (CSRF) vulnerabilityGHSA-rf4q-m23c-7q8rCVE-2024-39409Affected <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-p1 <2.4.7-p2, ==2.4.5, ==2.4.6, ==2.4.7Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Improper Access Control Leads to Privilege escalationGHSA-x6f9-hv9r-fgq4CVE-2024-39414Affected <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-beta1 <2.4.7-p2, ==2.4.5, ==2.4.6Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Improper Authorization vulnerabilityGHSA-5g9f-7gqc-8hj4CVE-2024-39405Affected >=2.4.4-p1 <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-beta1 <2.4.7-p2, ==2.4.4, ==2.4.5, ==2.4.6Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Improper Authorization vulnerabilityGHSA-qrh3-vxjg-h9h6CVE-2024-39404Affected >=2.4.4-p1 <2.4.4-p10, >=2.4.5-p1 <2.4.5-p9, >=2.4.6-p1 <2.4.6-p7, >=2.4.7-beta1 <2.4.7-p2, ==2.4.4, ==2.4.5, ==2.4.6Fixed in 2.4.4-p10 Fixed in 2.4.5-p9 Fixed in 2.4.6-p7 Fixed in 2.4.7-p2OSV source ↗2 years ago

MediumMagento Open Source allows Cross-Site Request Forgery (CSRF)GHSA-hqgj-4396-hmxvCVE-2024-20718Affected >=2.4.4-p1 <2.4.4-p7, >=2.4.5-p1 <2.4.5-p6, >=2.4.6-p1 <2.4.6-p4, ==2.4.4, ==2.4.5, ==2.4.6Fixed in 2.4.4-p7 Fixed in 2.4.5-p6 Fixed in 2.4.6-p4OSV source ↗3 years ago

MediumMagento Open Source has Business Logic Errors VulnerabilityGHSA-28vp-39rf-3q2jCVE-2023-29294Affected >=2.4.4-p1 <2.4.4-p4, >=2.4.5-p1 <2.4.5-p3, ==2.4.4, ==2.4.5, ==2.4.6Fixed in 2.4.4-p4 Fixed in 2.4.5-p3OSV source ↗3 years ago

MediumMagento Open Source allows Incorrect AuthorizationGHSA-354h-fpmq-68v7CVE-2023-29295Affected >=2.4.4-p1 <2.4.4-p4, >=2.4.5-p1 <2.4.5-p3, ==2.4.4, ==2.4.5, ==2.4.6Fixed in 2.4.4-p4 Fixed in 2.4.5-p3OSV source ↗3 years ago

MediumMagento Open Source allows Incorrect AuthorizationGHSA-3qr4-w96f-672vCVE-2023-29296Affected >=2.4.4-p1 <2.4.4-p4, >=2.4.5-p1 <2.4.5-p3, ==2.4.4, ==2.4.5, ==2.4.6Fixed in 2.4.4-p4 Fixed in 2.4.5-p3OSV source ↗3 years ago

MediumMagento Open Source allows Incorrect AuthorizationGHSA-f989-3fp9-q3r2CVE-2023-29288Affected >=2.4.4-p1 <2.4.4-p4, >=2.4.5-p1 <2.4.5-p3, ==2.4.4, ==2.4.5, ==2.4.6Fixed in 2.4.4-p4 Fixed in 2.4.5-p3OSV source ↗3 years ago

MediumMagento Open Source allows Incorrect AuthorizationGHSA-2wm7-mmgc-qxr3CVE-2023-22251Affected >=2.4.4-p1 <2.4.4-p3, >=2.4.5-p1 <2.4.5-p2, ==2.4.4, ==2.4.5Fixed in 2.4.4-p3 Fixed in 2.4.5-p2OSV source ↗4 years ago

MediumMagento cross-site request forgery (CSRF) vulnerability via the GraphQL APIGHSA-h4xc-577p-hgj9BIT-magento-2021-21027CVE-2021-21027Affected <2.3.6-p1, >=2.4.0 <2.4.2Fixed in 2.3.6-p1 Fixed in 2.4.2OSV source ↗4 years ago

MediumMagento incorrect permissions vulnerability in the Inventory moduleGHSA-p7m7-j8jv-393qBIT-magento-2020-24405CVE-2020-24405Affected <2.3.6, >=2.4.0 <2.4.1Fixed in 2.3.6 Fixed in 2.4.1OSV source ↗4 years ago

MediumMagento 2 Community Edition Cross-site Scripting VulnerabilityGHSA-8578-mmf4-f327CVE-2019-7873Affected >=2.1.0 <2.1.18, >=2.2.0 <2.2.9, >=2.3.0 <2.3.2Fixed in 2.1.18 Fixed in 2.2.9 Fixed in 2.3.2OSV source ↗4 years ago

MediumMagento Cross-Site Request Forgery (CSRF)GHSA-f6ww-vqw2-xp3vCVE-2019-7857Affected >=2.1.0 <2.1.18, >=2.2.0 <2.2.9, >=2.3.0 <2.3.2Fixed in 2.1.18 Fixed in 2.2.9 Fixed in 2.3.2OSV source ↗4 years ago

MediumMagento observable timing discrepancy vulnerabilityGHSA-xgp9-j48h-jjf9BIT-magento-2020-9690CVE-2020-9690Affected <2.3.5-p2Fixed in 2.3.5-p2OSV source ↗4 years ago

LowMagento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerabilityGHSA-6w27-c66f-gvhqCVE-2025-24430Affected <2.4.4-p12, >=2.4.5-p1 <2.4.5-p11, >=2.4.6-p1 <2.4.6-p9, >=2.4.7-beta1 <2.4.7-p4, ==2.4.5, ==2.4.6, ==2.4.8-beta1Fixed in 2.4.4-p12 Fixed in 2.4.5-p11 Fixed in 2.4.6-p9 Fixed in 2.4.7-p4OSV source ↗2 years ago

LowMagento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerabilityGHSA-7jmr-43qj-pw47CVE-2025-24432Affected <2.4.4-p12, >=2.4.5-p1 <2.4.5-p11, >=2.4.6-p1 <2.4.6-p9, >=2.4.7-beta1 <2.4.7-p4, ==2.4.5, ==2.4.6, ==2.4.8-beta1Fixed in 2.4.4-p12 Fixed in 2.4.5-p11 Fixed in 2.4.6-p9 Fixed in 2.4.7-p4OSV source ↗2 years ago

LowMagento Information Disclosure vulnerabilityGHSA-w942-fw92-mqm2BIT-magento-2021-28566CVE-2021-28566Affected >=2.3.0 <2.3.7, >=2.4.0 <2.4.2-p1Fixed in 2.3.7 Fixed in 2.4.2-p1OSV source ↗4 years ago

LowMagento information disclosure vulnerabilityGHSA-mr8q-7f5j-wc79BIT-magento-2020-24406CVE-2020-24406Affected <2.3.6, >=2.4.0 <2.4.1Fixed in 2.3.6 Fixed in 2.4.1OSV source ↗4 years ago

LowMagento Improper Access Control vulnerabilityGHSA-656q-fx2w-8ccvCVE-2025-24429Affected <2.4.4-p12, >=2.4.5-p1 <2.4.5-p11, >=2.4.6-p1 <2.4.6-p9, >=2.4.7-beta1 <2.4.7-p4, ==2.4.5, ==2.4.6, ==2.4.8-beta1Fixed in 2.4.4-p12 Fixed in 2.4.5-p11 Fixed in 2.4.6-p9 Fixed in 2.4.7-p4OSV source ↗2 years ago

LowMagento Authenticated Security feature bypassGHSA-85jx-x9r4-45m2CVE-2025-49549Affected <2.4.5-p13, >=2.4.6-p1 <2.4.6-p11, >=2.4.7-beta1 <2.4.7-p6, ==2.4.6, ==2.4.8Fixed in 2.4.5-p13 Fixed in 2.4.6-p11 Fixed in 2.4.7-p6OSV source ↗last year

LowMagento does not properly protect credentialsGHSA-2r94-wm5v-4prxCVE-2025-27192Affected <2.4.4-p13, >=2.4.5-p1 <2.4.5-p12, >=2.4.6-p1 <2.4.6-p10, >=2.4.7-beta1 <2.4.7-p5, >=2.4.8-beta1 <2.4.8-beta2, ==2.4.5, ==2.4.6Fixed in 2.4.4-p13 Fixed in 2.4.5-p12 Fixed in 2.4.6-p10 Fixed in 2.4.7-p5 Fixed in 2.4.8-beta2OSV source ↗2 years ago

LowMagento Open Source Information Exposure vulnerabilityGHSA-4f89-5cwm-rm5gBIT-magento-2024-45134CVE-2024-45134Affected <2.4.4-p11, >=2.4.5-p1 <2.4.5-p10, >=2.4.6-p1 <2.4.6-p8, >=2.4.7-beta1 <2.4.7-p3, ==2.4.5, ==2.4.6Fixed in 2.4.4-p11 Fixed in 2.4.5-p10 Fixed in 2.4.6-p8 Fixed in 2.4.7-p3OSV source ↗2 years ago

LowMagento Open Source Improper Access Control vulnerabilityGHSA-8pxg-gcp4-57wwBIT-magento-2024-45135CVE-2024-45135Affected <2.4.4-p11, >=2.4.5-p1 <2.4.5-p10, >=2.4.6-p1 <2.4.6-p8, >=2.4.7-beta1 <2.4.7-p3, ==2.4.5, ==2.4.6Fixed in 2.4.4-p11 Fixed in 2.4.5-p10 Fixed in 2.4.6-p8 Fixed in 2.4.7-p3OSV source ↗2 years ago

LowMagento Open Source Information Exposure vulnerabilityGHSA-j3mh-wx5f-2vhgBIT-magento-2024-45133CVE-2024-45133Affected <2.4.4-p11, >=2.4.5-p1 <2.4.5-p10, >=2.4.6-p1 <2.4.6-p8, >=2.4.7-beta1 <2.4.7-p3, ==2.4.5, ==2.4.6Fixed in 2.4.4-p11 Fixed in 2.4.5-p10 Fixed in 2.4.6-p8 Fixed in 2.4.7-p3OSV source ↗2 years ago

LowMagento Open Source Improper Access Control vulnerabilityGHSA-w7rg-7wq2-pjrwBIT-magento-2024-45149CVE-2024-45149Affected <2.4.4-p11, >=2.4.5-p1 <2.4.5-p10, >=2.4.6-p1 <2.4.6-p8, >=2.4.7-beta1 <2.4.7-p3, ==2.4.5, ==2.4.6Fixed in 2.4.4-p11 Fixed in 2.4.5-p10 Fixed in 2.4.6-p8 Fixed in 2.4.7-p3OSV source ↗2 years ago

LowMagento Open Source affected by Improper Input ValidationGHSA-66c9-xrwj-9xv6CVE-2023-29293Affected >=2.4.4-p1 <2.4.4-p4, >=2.4.5-p1 <2.4.5-p3, ==2.4.4, ==2.4.5, ==2.4.6Fixed in 2.4.4-p4 Fixed in 2.4.5-p3OSV source ↗3 years ago

LowMagento incorrect user permissions vulnerability within the Inventory componentGHSA-39rw-4m66-82gfBIT-magento-2020-24403CVE-2020-24403Affected <2.3.6, >=2.4.0 <2.4.1Fixed in 2.3.6 Fixed in 2.4.1OSV source ↗4 years ago

LowMagento 2 Community Edition vulnerable to Improper AuthorizationGHSA-rwf7-652f-76mvBIT-magento-2020-24404CVE-2020-24404Affected <2.3.6, >=2.4.0 <2.4.1Fixed in 2.3.6 Fixed in 2.4.1OSV source ↗4 years ago