The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in synchronization errors when using shared resources. This allows attackers to circumvent existing security restrictions and gain unauthorized access to protected information.

🗓️ 12 May 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

Synchronization errors in shared resources allow Magento and Adobe Commerce to bypass security.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2025-24432	11 Feb 202518:20	–	circl
CNNVD	Adobe Commerce 安全漏洞	11 Feb 202500:00	–	cnnvd
CNVD	Adobe Commerce Security Bypass Vulnerability (CNVD-2025-03622)	17 Feb 202500:00	–	cnvd
CVE	CVE-2025-24432	11 Feb 202517:37	–	cve
Cvelist	CVE-2025-24432 Adobe Commerce \| Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367)	11 Feb 202517:37	–	cvelist
EUVD	EUVD-2025-3712	3 Oct 202520:07	–	euvd
Github Security Blog	Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability	11 Feb 202518:31	–	github
NCSC	Vulnerabilities fixed in Adobe Commerce and Magento	13 Feb 202506:46	–	ncsc
NVD	CVE-2025-24432	11 Feb 202518:15	–	nvd
OSV	GHSA-7JMR-43QJ-PW47 Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability	11 Feb 202518:31	–	osv

Vulners

Node

adobe_systems adobe_commerceRange<2.4.7-p3

OR

adobe_systems adobe_commerceRange<2.4.6-p8

OR

adobe_systems adobe_commerceRange<2.4.5-p10

OR

adobe_systems adobe_commerceRange<2.4.4-p11

OR

adobe_systems adobe_commerce_b2bRange<1.4.2-p3

OR

adobe_systems adobe_commerce_b2bRange<1.3.5-p8

OR

adobe_systems adobe_commerce_b2bRange<1.3.4-p10

OR

adobe_systems adobe_commerce_b2bRange<1.3.3-p11

OR

adobe_systems magento_open_sourceRange<2.4.7-p3

OR

adobe_systems magento_open_sourceRange<2.4.6-p8

OR

adobe_systems magento_open_sourceRange<2.4.5-p10

OR

adobe_systems magento_open_sourceRange<2.4.4-p11

OR

adobe_systems adobe_commerceMatch2.4.8-beta1

OR

adobe_systems magento_open_sourceMatch2.4.8-beta1

OR

adobe_systems adobe_commerce_b2bRange<1.5.0

Source	Link
helpx	www.helpx.adobe.com/security/products/magento/apsb25-08.html
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2025021201
web	www.web.nvd.nist.gov/view/vuln/detail

12 May 2025 00:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 22.6

CVSS 33.7

EPSS0.00369

synchronization errors shared resources magento open source adobe commerce remote attackers security bypass