Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2021-21427

Backport for CVE-2021-21024 Blind SQLi from Magento 2

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

Magento-lts is a long-term support alternative to Magento Community Edition (CE). A vulnerability in magento-lts versions before 19.4.13 and 20.0.9 potentially allows an administrator unauthorized access to restricted resources. This is a backport of CVE-2021-21024. The vulnerability is patched in versions 19.4.13 and 20.0.9.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenMage magento-lts

  • <= 19.4.12affected
  • <= 20.0.8affected

References