VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Feb 11, 2025· Updated Jun 17, 2026

CVE-2025-24423

CVE-2025-24423

Description

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to modify select data. Exploitation of this issue does not require user interaction.

Affected products

18
  • Adobe Inc./Commercecpe-rescue17 versions
    0+ 16 more
    • (no CPE)range: 0
    • cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:*range: <1.3.3
    • cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*
    • cpe:2.3:a:adobe:commerce_b2b:1.5.0:*:*:*:*:*:*:*
    • (no CPE)range: <=2.4.8-beta1, <=2.4.7-p3, <=2.4.6-p8, <=2.4.5-p10, <=2.4.4-p11
  • Adobe Inc./Magentollm-fuzzy
    Range: <=2.4.8-beta1, <=2.4.7-p3, <=2.4.6-p8, <=2.4.5-p10, <=2.4.4-p11

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.