Unrated severityNVD Advisory· Published Jun 13, 2024· Updated Aug 7, 2024
Large attack surface through legit webhook usage in Adobe Commerce
CVE-2024-34108
Description
Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but admin privileges are required and scope is changed.
Affected products
2- Adobe/Adobe Commercev5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- helpx.adobe.com/security/products/magento/apsb24-40.htmlmitrevendor-advisory
News mentions
0No linked articles in our index yet.