Files
CVEs-PoC/2021/CVE-2021-36031.md
2025-09-29 21:09:30 +02:00

873 B

CVE-2021-36031

Description

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a Path Traversal vulnerability via the theme[preview_image] parameter. An attacker with admin privileges could leverage this vulnerability to achieve remote code execution.

POC

Reference

No PoCs from references.

Github