VYPR
Moderate severityNVD Advisory· Published Jun 13, 2024· Updated Aug 2, 2024

Insecure Direct Object Reference - An attacker can able to erase the victim quote details

CVE-2024-34106

Description

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to gain unauthorized access or perform actions with the privileges of another user. Exploitation of this issue does not require user interaction.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
magento/community-editionPackagist
>= 2.4.6-p1, < 2.4.6-p62.4.6-p6
magento/community-editionPackagist
>= 2.4.5-p1, < 2.4.5-p82.4.5-p8
magento/community-editionPackagist
< 2.4.4-p92.4.4-p9

Affected products

3

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.