Description

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper input validation vulnerability in the New customer WebAPI.Successful exploitation could allow an attacker to send unsolicited spam e-mails.

Remediation

References

CVE-2021-28585

Related Vulnerabilities

MySQL CVE-2018-3277 Vulnerability (CVE-2018-3277)

ownCloud Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2021-44537)

WordPress Plugin Admin side data storage for Contact Form 7 Cross-Site Scripting (1.1.1)

WordPress Plugin WP Js External Link Info Open Redirect (1.21)

WordPress Plugin Foliopress WYSIWYG Cross-Site Scripting (2.6.8.4)

Severity

Medium

Classification

CVE-2021-28585 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities