This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2021-21031 | BDVDB-2026-149059 Detail

AdobeMagento.com

Description#

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation.

Impact#

Per CVSS v3.0: confidentiality impact low, integrity impact low, availability impact low. Attack vector: network.

Weaknesses#

  • CWE-613 Insufficient Session Expiration (CWE-613)

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.