Magento

Records224All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical33CVSS 9.0–10.0

CVSS high70CVSS 7.0–8.9

Exploited now

Magento records in CISA KEV

No Magento vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Magento 221 records CRITICAL Advanced Newsletter 1 record MEDIUM Magento2 1 record LOW Upward Connector 1 record LOW Upward Php 1 record LOW

Records

1 record in Upward Php · all components

TI-2021-04170 CVE-2021-21064

Magento UPWARD-php Path traversal vulnerability via UPWARD Connector

LOW 34

Magento UPWARD-php version 1.1.4 (and earlier) is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 (and earlier) due to the upload feature.

CVSS 3.0MEDIUM 4.9 Network High privileges No interaction EPSS 0.08514 Published 2021-02-25 No fix listed CWE-22

Open these records in search →

Critical	33
High	70
Medium	117
Low	4
No CVSS	0