Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- M
Denial of Service (DoS)CVE-2023-38251
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p6>=2.4.5-p1, <2.4.5-p5>=2.4.6-p1, <2.4.6-p3>=2.4.7-beta1, <2.4.7-beta2
Has fix
ComposerPublished 5 Mar 2025
- C
Cross-site Scripting (XSS)CVE-2024-20759
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p8>=2.4.5-p1, <2.4.5-p7>=2.4.6-p1, <2.4.6-p5>=2.4.7-beta1, <2.4.7
Has fix
ComposerPublished 5 Mar 2025
- M
Server-side Request Forgery (SSRF)CVE-2023-29291
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p4>=2.4.5-p1, <2.4.5-p3
Has fix
ComposerPublished 5 Mar 2025
- H
XML InjectionCVE-2023-22247
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p3>=2.4.5-p1, <2.4.5-p2
Has fix
ComposerPublished 5 Mar 2025
- M
XML InjectionCVE-2023-38207
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p5>=2.4.5-p1, <2.4.5-p4>=2.4.6-p1, <2.4.6-p2
Has fix
ComposerPublished 5 Mar 2025
- H
Improper Input ValidationCVE-2023-26367
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p6>=2.4.5-p1, <2.4.5-p5>=2.4.6-p1, <2.4.6-p3>=2.4.7-beta1, <2.4.7-beta2
Has fix
ComposerPublished 5 Mar 2025
- H
SQL InjectionCVE-2023-38221
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p6>=2.4.5-p1, <2.4.5-p5>=2.4.6-p1, <2.4.6-p3>=2.4.7-beta1, <2.4.7-beta2
Has fix
ComposerPublished 5 Mar 2025
- M
Server-side Request Forgery (SSRF)CVE-2023-29292
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p4>=2.4.5-p1, <2.4.5-p3
Has fix
ComposerPublished 5 Mar 2025
- M
Improper Input ValidationCVE-2023-29293
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p4>=2.4.5-p1, <2.4.5-p3
Has fix
ComposerPublished 5 Mar 2025
- H
Server-side Request Forgery (SSRF)CVE-2023-26366
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p6>=2.4.5-p1, <2.4.5-p5>=2.4.6-p1, <2.4.6-p3>=2.4.7-beta1, <2.4.7-beta2
Has fix
ComposerPublished 5 Mar 2025
- C
Cross-site Scripting (XSS)CVE-2023-38219
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p6>=2.4.5-p1, <2.4.5-p5>=2.4.6-p1, <2.4.6-p3>=2.4.7-beta1, <2.4.7-beta2
Has fix
ComposerPublished 5 Mar 2025
- M
Cross-site Request Forgery (CSRF)CVE-2024-20718
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p7>=2.4.5-p1, <2.4.5-p6>=2.4.6-p1, <2.4.6-p4
Has fix
ComposerPublished 5 Mar 2025
- L
Incorrect AuthorizationCVE-2023-22251
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p3>=2.4.5-p1, <2.4.5-p2
Has fix
ComposerPublished 5 Mar 2025
- C
Cross-site Scripting (XSS)CVE-2024-20719
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p7>=2.4.5-p1, <2.4.5-p6>=2.4.6-p1, <2.4.6-p4
Has fix
ComposerPublished 5 Mar 2025
- M
Access Control BypassCVE-2023-22250
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p3>=2.4.5-p1, <2.4.5-p2
Has fix
ComposerPublished 5 Mar 2025
- M
Missing Support for Integrity CheckCVE-2023-29290
Affects magento/community-edition | Versions >=2.4.5-p1, <2.4.5-p3>=2.4.4-p1, <2.4.4-p4
Has fix
ComposerPublished 5 Mar 2025
- H
Improper AuthorizationCVE-2023-38220
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p6>=2.4.5-p1, <2.4.5-p5>=2.4.6-p1, <2.4.6-p3>=2.4.7-beta1, <2.4.7-beta2
Has fix
ComposerPublished 5 Mar 2025
- M
Improper Check for Unusual or Exceptional ConditionsCVE-2025-24425
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025
- M
Incorrect AuthorizationCVE-2025-24421
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025
- M
Cross-site Scripting (XSS)CVE-2025-24428
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025
- M
Access Control BypassCVE-2025-24437
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025
- M
Access Control BypassCVE-2025-24436
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025
- M
Access Control BypassCVE-2025-24435
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025
- M
Access Control BypassCVE-2025-24427
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025
- H
Information ExposureCVE-2025-24408
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025
- M
Access Control BypassCVE-2025-24429
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025
- H
Access Control BypassCVE-2025-24411
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025
- H
Improper AuthorizationCVE-2025-24409
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025
- M
Directory TraversalCVE-2025-24406
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025
- M
Cross-site Scripting (XSS)CVE-2025-24410
Affects magento/community-edition | Versions <2.4.4-p12>=2.4.5-p1, <2.4.5-p11>=2.4.6-p1, <2.4.6-p9>=2.4.7-beta1, <2.4.7-p4>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 4 Mar 2025