CVE-2021-21022

—

CVSS 3.1

5.3 medium

EPSS

2%p81

Published

Feb 11, 2021 (Feb 11, 2021)

Modified

Jun 17, 2026

Description

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object reference (IDOR) in the product module. Successful exploitation could lead to unauthorized access to restricted resources.

Vendors: magento
Products: magento
Ecosystems: E-commerce
Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.