DataFlow upload remote code execution vulnerability

CVE-2021-41231

Affected version: >=20.0.0,<20.0.19|<19.4.22

Reported by:
GitHub

Fix for authenticated remote code execution through layout update

CVE-2021-41144

Affected version: >=20.0.0,<20.0.19|<19.4.22

Reported by:
GitHub

DoS vulnerability in MaliciousCode filter

CVE-2023-23617

Affected version: >=20.0.0,<20.0.19|<19.4.22

Reported by:
GitHub

Fix for arbitrary file deletion in customer media allows for remote code execution

CVE-2021-41143

Affected version: >=20.0.0,<20.0.19|<19.4.22

Reported by:
GitHub

Fix for arbitrary command execution in custom layout update through blocks

CVE-2021-39217

Affected version: >=20.0.0,<20.0.19|<19.4.22

Reported by:
GitHub

magento-lts Reset Password not protected against well-timed CSRF

CVE-2021-21395

Affected version: >=20.0.0,<20.0.19|<19.4.22

Reported by:
GitHub