← Database

CVE-2021-36029

CRITICAL CVSS: 9.1 Published: 2021-09-01 Modified: 2026-06-17

Description

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization vulnerability. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution.

Affected Platforms

Adobe Magento Open SourceAdobe Adobe Commerce

Weakness Type

CWE-285, NVD-CWE-Other

References