Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/magento/magento2 ↗ | |
| f4c1d7526f05bdfb1327b0701cc345f94aadcaed through 44a7b6079bcac5ba92040b16f4f74024b4f34d09 | No fix listed |
| 6729b6e01368248abc33300208eb292c95050203 through 33242e4b19cf207d7b73f7791ef894b48bb41f8a | No fix listed |
| 1bd5cb8c065e44779526c0b044ce19b884707695 through 1bd5cb8c065e44779526c0b044ce19b884707695 | No fix listed |
Also listed as affected (1)
| |
Description
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter the price of items.