tocsin

CVE-2021-21020

2 advisories.

Packagist/magento/community-edition CVE-2021-21020: medium 5.3

Magento Improper Access Control

Action: Upgrade magento/community-edition to 2.3.6 or later.

composer require magento/community-edition:2.3.6
composer require magento/community-edition:2.4.1-p1

Affected

introducedfixedlast affected
02.3.6-
2.4.02.4.1-p1-

Fixed versions

2.3.62.4.1-p1

Sources

CVE-2021-21020 · published · modified · JSON

Packagist/magento/project-community-edition CVE-2021-21020: medium 5.3

Magento Improper Access Control

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-2.0.2

Fixed versions

No fixed version in the source.

Sources

CVE-2021-21020 · published · modified · JSON