Description

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper input validation vulnerability in the New customer WebAPI.Successful exploitation could allow an attacker to send unsolicited spam e-mails.

Remediation

References

CVE-2021-28585

Related Vulnerabilities

MySQL CVE-2020-14827 Vulnerability (CVE-2020-14827)

Nginx Insufficient Session Expiration Vulnerability (CVE-2014-3616)

WordPress 3.9.x Multiple Vulnerabilities (3.9 - 3.9.21)

OpenSSL Cryptographic Issues Vulnerability (CVE-2011-4108)

Drupal Core 7.x Cross-Site Scripting (7.0 - 7.72)

Severity

Medium

Classification

CVE-2021-28585 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities