Description

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by an Improper input validation vulnerability in the New customer WebAPI.Successful exploitation could allow an attacker to send unsolicited spam e-mails.

Remediation

References

CVE-2021-28585

Related Vulnerabilities

WordPress Improper Input Validation Vulnerability (CVE-2017-6815)

WordPress Plugin Gallery Plugin for WordPress-Envira Photo Gallery Cross-Site Scripting (1.8.3.2)

WordPress Plugin MWB Point of Sale (POS) for WooCommerce-Generate Barcodes, Process your Bills, Synchronize, Your Online-Offline Orders Cross-Site Request Forgery (1.0.0)

ATutor Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3706)

WordPress Plugin Content Copy Protection & Prevent Image Save Cross-Site Request Forgery (1.3)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2021-28585