Miggo Logo
Miggo Vulnerability Database
→
CVE-2023-29293

CVE-2023-29293: Magento Open Source affected by Improper Input Validation

2.7

CVSS Score
3.1

Basic Information

CVE ID
CVE-2023-29293
GHSA ID
GHSA-66c9-xrwj-9xv6
EPSS Score
0.08598%
CWE
CWE-20
Published
6/15/2023
Updated
3/4/2025
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Package NameEcosystemVulnerable VersionsFirst Patched Version
magento/community-editioncomposer= 2.4.6
magento/community-editioncomposer= 2.4.5
magento/community-editioncomposer= 2.4.4
magento/community-editioncomposer>= 2.4.5-p1, < 2.4.5-p32.4.5-p3
magento/community-editioncomposer>= 2.4.4-p1, < 2.4.4-p42.4.4-p4
magento/project-community-editioncomposer<= 2.0.2

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

**o** *omm*r** v*rsions *.*.* (*n* **rli*r), *.*.*-p* (*n* **rli*r) *n* *.*.*-p* (*n* **rli*r) *r* *****t** *y *n Improp*r Input V*li**tion vuln*r**ility t**t *oul* r*sult in * S**urity ***tur* *yp*ss. *n **min privil**** *tt**k*r *oul* l*v*r*** t*is

Reasoning

No *n*lysis *v*il**l*