Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-24093

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

Published

2023-09-12T08:15:12.960

Last Modified

2024-11-21T06:49:47.413

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.1 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe magento_open_source < 2.3.7 Yes
Application adobe magento_open_source < 2.4.3 Yes
Application adobe magento_open_source 2.3.7 Yes
Application adobe magento_open_source 2.3.7 Yes
Application adobe magento_open_source 2.4.3 Yes
Application adobe magento_open_source 2.4.3 Yes
Application adobe commerce < 2.3.7 Yes
Application adobe commerce < 2.4.3 Yes
Application adobe commerce 2.3.7 Yes
Application adobe commerce 2.3.7 Yes
Application adobe commerce 2.4.3 Yes
Application adobe commerce 2.4.3 Yes
References