medium5.3
CVE-2021-21012
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the ch…
Impact
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module. Successful exploitation could lead to sensitive information disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Magento Commerce | through 2.3.6 Versions 2.4.0, 2.4.1 |
| Adobe | Magento Open Source | through 2.3.6 Versions 2.4.0, 2.4.1 |