Magento Commerce versions 2.4.2 (and... CVE-2021-36022
6.5
AV
AC
AU
C
I
A
发布：
2021-09-01
修订：
2024-11-21
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有4条受影响产品信息
