VYPR
Low severityNVD Advisory· Published Jun 15, 2023· Updated Mar 5, 2025

Bypass Purchase Order Approval using Company User in Adobe Commerce B2B

CVE-2023-29294

Description

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Business Logic Errors vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this issue does not require user interaction.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
magento/community-editionPackagist
>= 2.4.5-p1, < 2.4.5-p32.4.5-p3
magento/community-editionPackagist
>= 2.4.4-p1, < 2.4.4-p42.4.4-p4
magento/project-community-editionPackagist
<= 2.0.2

Affected products

3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.