Lucene search

K
adobeAdobeAPSB24-03
HistoryFeb 13, 2024 - 12:00 a.m.

APSB24-03 : Security update available for Adobe Commerce

2024-02-1300:00:00
helpx.adobe.com
59
adobe
commerce
magento
security update
vulnerabilities
arbitrary code execution
security feature bypass
denial-of-service

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.1%

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important, and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution, security feature bypass, and application denial-of-service.

Affected configurations

Vulners
Node
adobeadobe_commerceRange2.4
OR
adobemagentoRange2.4open_source
CPENameOperatorVersion
adobe commercele2.4
magento open sourcele2.4

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.1%