Описание
Magento vulnerable to denial of service
Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input, causing the application to crash or become unresponsive. Exploitation of this issue does not require user interaction.
Пакеты
magento/project-community-edition
<= 2.0.2
Отсутствует
magento/community-edition
>= 2.4.9-alpha1, < 2.4.9-alpha2
2.4.9-alpha2
magento/community-edition
>= 2.4.8-beta1, < 2.4.8-p2
2.4.8-p2
magento/community-edition
>= 2.4.7-beta1, < 2.4.7-p7
2.4.7-p7
magento/community-edition
>= 2.4.6-p1, < 2.4.6-p12
2.4.6-p12
magento/community-edition
< 2.4.5-p14
2.4.5-p14
magento/community-edition
= 2.4.5
Отсутствует
magento/community-edition
= 2.4.6
Отсутствует
magento/community-edition
= 2.4.7
Отсутствует
magento/community-edition
= 2.4.8
Отсутствует
Связанные уязвимости
Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input, causing the application to crash or become unresponsive. Exploitation of this issue does not require user interaction.
Уязвимость программных платформ для разработки и управления онлайн магазинами Magento Open Source, Adobe Commerce и Adobe Commerce B2B, связанная c недостаточной проверкой входных данных, позволяющая нарушителю вызвать отказ в обслуживании