CVE-2021-36030

HIGH · CVSS 7.5 EPSS 2.29%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-09-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-36030

Severity

HIGH

CVSS

7.5

EPSS

2.29%

Original NVD Description

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an improper input validation vulnerability during the checkout process. An unauthenticated attacker can leverage this vulnerability to alter the price of items.