Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-22250

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature. Exploitation of this issue does not require user interaction.

Published

2023-03-27T21:15:10.860

Last Modified

2024-11-21T07:44:24.110

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-284
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe commerce < 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.5 Yes
Application adobe commerce 2.4.5 Yes
Application adobe magento_open_source < 2.4.4 Yes
Application adobe magento_open_source 2.4.4 Yes
Application adobe magento_open_source 2.4.4 Yes
Application adobe magento_open_source 2.4.4 Yes
Application adobe magento_open_source 2.4.5 Yes
Application adobe magento_open_source 2.4.5 Yes
References