Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-38220


Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this issue does not require user interaction.


Published

2023-10-13T07:15:40.557

Last Modified

2024-11-21T08:13:06.863

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Primary
    CWE-285

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application adobe commerce 2.3.7 Yes
Application adobe commerce 2.3.7 Yes
Application adobe commerce 2.3.7 Yes
Application adobe commerce 2.3.7 Yes
Application adobe commerce 2.3.7 Yes
Application adobe commerce 2.3.7 Yes
Application adobe commerce 2.3.7 Yes
Application adobe commerce 2.3.7 Yes
Application adobe commerce 2.3.7 Yes
Application adobe commerce 2.4.0 Yes
Application adobe commerce 2.4.0 Yes
Application adobe commerce 2.4.0 Yes
Application adobe commerce 2.4.0 Yes
Application adobe commerce 2.4.0 Yes
Application adobe commerce 2.4.1 Yes
Application adobe commerce 2.4.1 Yes
Application adobe commerce 2.4.1 Yes
Application adobe commerce 2.4.1 Yes
Application adobe commerce 2.4.1 Yes
Application adobe commerce 2.4.2 Yes
Application adobe commerce 2.4.2 Yes
Application adobe commerce 2.4.2 Yes
Application adobe commerce 2.4.2 Yes
Application adobe commerce 2.4.2 Yes
Application adobe commerce 2.4.3 Yes
Application adobe commerce 2.4.3 Yes
Application adobe commerce 2.4.3 Yes
Application adobe commerce 2.4.3 Yes
Application adobe commerce 2.4.3 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.4 Yes
Application adobe commerce 2.4.5 Yes
Application adobe commerce 2.4.5 Yes
Application adobe commerce 2.4.5 Yes
Application adobe commerce 2.4.5 Yes
Application adobe commerce 2.4.5 Yes
Application adobe commerce 2.4.5 Yes
Application adobe commerce 2.4.6 Yes
Application adobe commerce 2.4.6 Yes
Application adobe commerce 2.4.6 Yes
Application adobe commerce 2.4.7 Yes
Application adobe magento 2.4.4 Yes
Application adobe magento 2.4.4 Yes
Application adobe magento 2.4.4 Yes
Application adobe magento 2.4.4 Yes
Application adobe magento 2.4.5 Yes
Application adobe magento 2.4.5 Yes
Application adobe magento 2.4.5 Yes
Application adobe magento 2.4.5 Yes
Application adobe magento 2.4.5 Yes
Application adobe magento 2.4.6 Yes
Application adobe magento 2.4.6 Yes
Application adobe magento 2.4.6 Yes
Application adobe magento 2.4.7 Yes

References