Magento Commerce versions 2.4.2 (and... CVE-2021-36012
4.0
AV
AC
AU
C
I
A
发布：
2021-09-01
修订：
2024-11-21
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a business logic error in the placeOrder graphql mutation. An authenticated attacker can leverage this vulnerability to altar the price of an item.
漏洞利用/PoC
暂无可用Exp或PoC
受影响的平台与产品
当前有4条受影响产品信息
