Security advisories

medium2024-10-10

CVE-2024-45135-Magento Open Source Improper Access Control vulnerability

magento/magento2 · GHSA-8pxg-gcp4-57ww

high2024-10-10

CVE-2024-45132-Magento Open Source Improper Authorization vulnerability

magento/magento2 · GHSA-5f64-ppmg-cvvm

medium2024-10-10

CVE-2024-45134-Magento Open Source Information Exposure vulnerability

magento/magento2 · GHSA-4f89-5cwm-rm5g

medium2024-10-10

CVE-2024-45125-Magento Open Source Incorrect Authorization vulnerability

magento/magento2 · GHSA-xg36-8c2v-jpxh

medium2024-10-10

CVE-2024-45124-Magento Open Source Improper Access Control vulnerability

magento/magento2 · GHSA-w3p2-pc3h-69wv

medium2024-10-10

CVE-2024-45130-Magento Open Source Improper Access Control vulnerability

magento/magento2 · GHSA-v3v6-jfvw-m576

medium2024-10-10

CVE-2024-45128-Magento Open Source Improper Authorization vulnerability

magento/magento2 · GHSA-qpp7-742q-58j3

medium2024-10-10

CVE-2024-45129-Magento Open Source Improper Access Control vulnerability

magento/magento2 · GHSA-m58h-998x-66f3

medium2024-10-10

CVE-2024-45119-Magento Open Source Server-Side Request Forgery (SSRF) vulnerability

magento/magento2 · GHSA-g9fm-wc6h-pvgj

high2024-10-10

CVE-2024-45118-Magento Open Source Improper Access Control vulnerability

magento/magento2 · GHSA-cg52-68fv-94qq

medium2024-10-10

CVE-2024-45127-Magento Open Source stored Cross-Site Scripting (XSS) vulnerability

magento/magento2 · GHSA-c89g-gq5r-2xw2

medium2024-10-10

CVE-2024-45123-Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability

magento/magento2 · GHSA-88x2-cq34-5fwc

medium2024-10-10

CVE-2024-45116-Magento Open Source Cross-Site Scripting (XSS) vulnerability

magento/magento2 · GHSA-873m-72g6-853g

medium2024-10-10

CVE-2024-45120-Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

magento/magento2 · GHSA-47jp-46c9-25vf

medium2024-10-10

CVE-2024-45122-Magento Open Source Improper Access Control vulnerability

magento/magento2 · GHSA-46fm-x82m-5f74

medium2024-10-10

CVE-2024-45117-Magento Open Source Improper Input Validation vulnerability

magento/magento2 · GHSA-3fr3-gcqh-3m2g

medium2024-10-10

CVE-2024-45121-Magento Open Source Improper Access Control vulnerability

magento/magento2 · GHSA-2qhq-fw98-h6wg

low2024-10-10

CVE-2024-48949-Elliptic's verify function omits uniqueness validation

indutny/elliptic · GHSA-434g-2637-qmqr

low2024-10-09

CVE-2024-47182-Dozzle uses unsafe hash for passwords

amir20/dozzle · GHSA-w7qr-q9fh-fj35

medium2024-10-09

CVE-2024-7041-open-webui Insecure Direct Object Reference (IDOR) vulnerability

open-webui/open-webui · GHSA-xcvc-5hgv-phqg