Adobe Commerce Command Injection Vulnerability

🗓️ 11 Aug 2023 00:00:00Reported by China National Vulnerability DatabaseType

Adobe Commerce has an operating system command injection vulnerability exploitable by an attacker with privileges.

Reporter	Title	Published	Views	Family All 18
BDU FSTEC	The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in the lack of measures taken to neutralize special elements used in the operating system. This allows attackers to execute arbitrary code.	29 Aug 202300:00	–	bdu_fstec
Circl	CVE-2023-38208	9 Aug 202312:16	–	circl
CNNVD	Adobe Commerce 操作系统命令注入漏洞	9 Aug 202300:00	–	cnnvd
CVE	CVE-2023-38208	9 Aug 202307:41	–	cve
CVE	CVE-2024-20720	15 Feb 202413:39	–	cve
Cvelist	CVE-2023-38208 Validate Your Inputs \| Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)	9 Aug 202307:41	–	cvelist
Cvelist	CVE-2024-20720 Command injection in data collector backup due to insufficient patching of CVE-2023-38208	15 Feb 202413:39	–	cvelist
EUVD	EUVD-2023-42028	3 Oct 202520:07	–	euvd
Github Security Blog	Magento Open Source allows Improper Neutralization of Special Elements Used	9 Aug 202309:30	–	github
NCSC	Vulnerabilities fixed in Adobe Commerce and Magento	9 Aug 202300:00	–	ncsc