VYPR
← All advisories
High severity7.6NVD Advisory· Published Oct 10, 2024· Updated Jun 17, 2026

CVE-2024-45117

CVE-2024-45117

Description

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An admin attacker could exploit this vulnerability to read files from the system outside of the intended directories via PHP filter chain and also can have a low-availability impact on the service. Exploitation of this issue does not require user interaction and scope is changed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
magento/community-editionPackagist
>= 2.4.7-beta1, < 2.4.7-p32.4.7-p3
magento/community-editionPackagist
>= 2.4.6-p1, < 2.4.6-p82.4.6-p8
magento/community-editionPackagist
>= 2.4.5-p1, < 2.4.5-p102.4.5-p10
magento/community-editionPackagist
< 2.4.4-p112.4.4-p11

Affected products

118
  • ghsa-coords
    pkg:composer/magento/community-edition
    Range: >= 2.4.7-beta1, < 2.4.7-p3
  • Adobe Inc./Commercecpe-rescue82 versions
    0+ 81 more
    • (no CPE)range: 0
    • cpe:2.3:a:adobe:commerce:-:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.3.7:p4-ext4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.0:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.1:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.2:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:*:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:ext-4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.3:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*
  • Adobe Inc./Magento35 versions
    cpe:2.3:a:adobe:magento:-:*:*:*:open_source:*:*:*+ 34 more
    • cpe:2.3:a:adobe:magento:-:*:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.3:*:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*
    • cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.