Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-22251

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Incorrect Authorization vulnerability. A low-privileged authenticated attacker could leverage this vulnerability to achieve minor information disclosure.

Published

2023-03-27T21:15:10.923

Last Modified

2024-11-21T07:44:24.210

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-863
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe commerce < 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.5 Yes
Application adobe commerce 2.4.5 Yes
Application adobe magento_open_source < 2.4.4 Yes
Application adobe magento_open_source 2.4.4 Yes
Application adobe magento_open_source 2.4.4 Yes
Application adobe magento_open_source 2.4.4 Yes
Application adobe magento_open_source 2.4.5 Yes
Application adobe magento_open_source 2.4.5 Yes
References