Security Advisory
CVE-2021-36029
9.1
CRITICAL
Vulnerability Description
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper improper authorization vulnerability. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution.
Published Date
September 1, 2021
Official Source
NIST NVD Advisory