Vulnerabilities > CVE-2021-36039 - Unspecified vulnerability in Adobe Commerce and Magento Open Source
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability via the `quoteId` parameter. An attacker can abuse this vulnerability to disclose sensitive information.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 10 |