Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 400
Reset filtersMagento Open Source affected by Improper Input Validation
Magento Open Source allows Server-Side Request Forgery (SSRF)
Magento Open Source allows Server-Side Request Forgery (SSRF)
Magento Open Source allows Incorrect Authorization
Magento Open Source allows XML Injection
Magento Open Source allows Incorrect Authorization
Magento Open Source allows Information Exposure
Magento Open Source allows Incorrect Authorization
Magento Open Source allows Improper Access Control
Magento Open Source allows XML Injection
DataFlow upload remote code execution vulnerability
Fix for authenticated remote code execution through layout update
DoS vulnerability in MaliciousCode filter
Fix for arbitrary file deletion in customer media allows for remote code execution
Fix for arbitrary command execution in custom layout update through blocks
magento-lts Reset Password not protected against well-timed CSRF
Magento Improper input validation vulnerability
Magento Open Source allows Improper Access Control
Magento Open Source allows Stored Cross-Site Scripting (Stored XSS)
Magento Open Source has Improper Access Control vulnerability
Magento Path Traversal vulnerability
Magento Improper Access Control vulnerability
Magento stored Cross-Site Scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.