Lucene search

K
cvelistAdobeCVELIST:CVE-2022-24086
HistoryFeb 13, 2022 - 12:00 a.m.

CVE-2022-24086 Adobe Commerce checkout improper input validation leads to remote code execution

2022-02-1300:00:00
CWE-20
adobe
raw.githubusercontent.com
4

9.6 High

AI Score

Confidence

High

0.226 Low

EPSS

Percentile

96.5%

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.