CVE-2020-24404

CVE-2020-24404

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API without authorization.

Source: CVE-2020-24404

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다