VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Jun 13, 2024· Updated Jun 17, 2026

CVE-2024-34106

CVE-2024-34106

Description

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to gain unauthorized access or perform actions with the privileges of another user. Exploitation of this issue does not require user interaction.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
magento/community-editionPackagist
>= 2.4.6-p1, < 2.4.6-p62.4.6-p6
magento/community-editionPackagist
>= 2.4.5-p1, < 2.4.5-p82.4.5-p8
magento/community-editionPackagist
< 2.4.4-p92.4.4-p9

Affected products

74
  • Adobe Inc./Commerce47 versions
    cpe:2.3:a:adobe:commerce:2.3.7:-:*:*:*:*:*:*+ 46 more
    • cpe:2.3:a:adobe:commerce:2.3.7:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*
    • (no CPE)range: 0
  • Adobe Inc./Commerce Webhooks
    cpe:2.3:a:adobe:commerce_webhooks:*:*:*:*:*:*:*:*
    Range: >=1.2.0,<=1.4.0
  • Adobe Inc./Magento24 versions
    cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*+ 23 more
    • cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*
  • osv-coords2 versions
    pkg:bitnami/magentopkg:composer/magento/community-edition
    >= 2.4.7-alpha0, < 2.4.7-p1+ 1 more
    • (no CPE)range: >= 2.4.7-alpha0, < 2.4.7-p1
    • (no CPE)

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.