CVE-2021-28567

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are vulnerable to an Improper Authorization vulnerability in the customers module. Successful exploitation could allow a low-privileged user to modify customer data. Access to the admin console is required for successful exploitation.

• CWE-285
• CWE-863

• https://helpx.adobe.com/security/products/magento/apsb21-30.htmlVendor Advisory
• https://helpx.adobe.com/security/products/magento/apsb21-30.htmlVendor Advisory

Published

Sep 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-28561Acrobat Reader DC versions versions 2021.001.20150 (and earl…8.8
• CVE-2021-28562Acrobat Reader DC versions versions 2021.001.20150 (and earl…8.8
• CVE-2021-28563Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier)…6.5
• CVE-2021-28564Acrobat Reader DC versions versions 2021.001.20150 (and earl…8.8
• CVE-2021-28565Acrobat Reader DC versions versions 2021.001.20150 (and earl…8.8
• CVE-2021-28566Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier)…2.7
• CVE-2021-28568Adobe Genuine Services version 7.1 (and earlier) is affected…6.5
• CVE-2021-28569Adobe Media Encoder version 15.1 (and earlier) is affected b…4.3
• CVE-2021-28570Adobe After Effects version 18.1 (and earlier) is affected b…8.6
• CVE-2021-28571Adobe After Effects version 18.1 (and earlier) is affected b…8.8
• CVE-2021-28573Adobe Animate version 21.0.5 (and earlier) is affected by an…6.5
• CVE-2021-28574Adobe Animate version 21.0.5 (and earlier) is affected by an…4.3