CVE-2022-42344CWE-863

[CVE-2021-36032] Magento IDOR Leads to Account Takeover

High · published October 20, 2022

CVSS v3.1
8.8
EPSS
1%
Percentile
70.6
In the wild
Unconfirmed
What it is

Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Incorrect Authorization vulnerability. An authenticated attacker can exploit this vulnerability to achieve information exposure and privilege escalation.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01317 · 70.6th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2022-10-20T16:28Z
EPSS history
Timeline
  • 20 OCT 16:28Z
    [CVE-2021-36032] Magento IDOR Leads to Account Takeover
    cvelistv5