VYPR
← All advisories
High severity7.7NVD Advisory· Published Nov 12, 2024· Updated Jun 17, 2026

CVE-2024-49521

CVE-2024-49521

Description

Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction.

Affected products

4
  • Adobe Inc./Commerce3 versions
    cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*range: <3.2.6
    • (no CPE)range: <=3.2.5
    • (no CPE)range: 0
  • Adobe Inc./Magento
    cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*
    Range: <3.2.6

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.