Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 161
Reset filtersMagento discloses sensitive information via the Multishipping Module
Magento is affected by an improper authorization vulnerability
Magento affected by a server-side denial-of-service using a GraphQL field
Magento Violation of Secure Design Principles vulnerability in RMA PDF filename formats
Magento DOM-based Cross-Site Scripting vulnerability on mage-messages cookies
Magento Path Traversal vulnerability
Magento Improper input validation vulnerability
Magento Insufficient Session Expiration
Magento Insecure Direct Object Reference (IDOR) in the product module
Magento cross-site request forgery (CSRF) vulnerability via the GraphQL API
Magento Insufficient Session Expiration
Magento stored cross-site scripting vulnerability in the admin console
Magento stored cross-site scripting (XSS) in the customer address upload feature
Magento improper authorization vulnerability in the integrations module
Magento vulnerable to a file upload restriction bypass
Magento XPath Injection
Magento Improper Access Control
Magento OS command injection via the WebAPI
Magento 2 Community Edition RCE via Unsafe File Upload
Magento 2 Community Edition Incorrect Authorization
Magento incorrect user permissions vulnerability within the Inventory component
Magento incorrect permissions vulnerability in the Integrations component
Magento DOM-based Cross-site scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.