Description

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions issue vulnerability in the Inventory module. This vulnerability could be abused by authenticated users to modify inventory stock data without authorization.

Remediation

References

CVE-2020-24405

Related Vulnerabilities

Joomla Other Vulnerability (CVE-2006-6833)

Coppermine Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2008-3486)

WordPress Plugin Ocean Extra Security Bypass (1.5.8)

WordPress Plugin Related Posts Cross-Site Scripting (5.12.91)

Internet Information Services Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2008-0075)

Severity

Medium

Classification

CVE-2020-24405 CWE-285 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities