Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Magento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access
Vulnerability Description
Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation.
CVSS Information
N/A
Vulnerability Type
不充分的会话过期机制
Vulnerability Title
Magento Commerce 和 Magento Open Source editions 代码问题漏洞
Vulnerability Description
Magento Commerce 和 Magento Open Source editions 中存在安全漏洞，该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。成功利用此漏洞可能导致执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A