~ / search / GHSA-7gh6-f4jh-3crq

GHSA-7gh6-f4jh-3crq

Magento Violation of Secure Design Principles vulnerability in RMA PDF filename formats

Source: GitHub Advisory Database (reviewed) High CVE-2021-28583

Packages

EcosystemPackageAffectedFixed in
Packagist magento/community-edition >= 2.4.0, < 2.4.2-p1 2.4.2-p1
Packagist magento/community-edition < 2.3.7 2.3.7
Packagist magento/project-community-edition <= 2.0.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Violation of Secure Design Principles vulnerability in RMA PDF filename formats. Successful exploitation could allow an attacker to get unauthorized access to restricted resources.

References

External links from the advisory. They lead to third-party sites.