CVE-2022-34253

🗓️ 16 Aug 2022 19:45:52Reported by adobeType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 103 Views

Adobe Commerce versions 2.4.3-p2 and earlier are affected by XML Injection vulnerability in Widgets Module

Reporter	Title	Published	Views	Family All 9
CNNVD	Adobe Magento Open Source 安全漏洞	9 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-34253 Adobe Commerce XML Injection Arbitrary code execution	16 Aug 202219:45	–	cvelist
Github Security Blog	Magento XML Injection vulnerability in the Widgets Module	17 Aug 202200:00	–	github
NVD	CVE-2022-34253	16 Aug 202221:15	–	nvd
OSV	BIT-MAGENTO-2022-34253	6 Mar 202410:56	–	osv
OSV	GHSA-CJ7W-PM77-HVG6 Magento XML Injection vulnerability in the Widgets Module	17 Aug 202200:00	–	osv
Prion	Input validation	16 Aug 202221:15	–	prion
Positive Technologies	PT-2022-4896 · Adobe · Commerce	9 Aug 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-34253 Adobe Commerce XML Injection Arbitrary code execution	16 Aug 202219:45	–	vulnrichment

NVD

Vulners

Node

adobe commerceRange2.3.0–2.3.7

adobe commerceRange2.4.0–2.4.3

adobe commerceMatch2.3.7-

adobe commerceMatch2.3.7p1

adobe commerceMatch2.3.7p2

adobe commerceMatch2.3.7p3

adobe commerceMatch2.4.3-

adobe commerceMatch2.4.3p1

adobe commerceMatch2.4.3p2

adobe commerceMatch2.4.4-

magento magentoRange2.3.0–2.3.7commerce

magento magentoRange2.4.0–2.4.3commerce

magento magentoMatch2.3.7-commerce

magento magentoMatch2.3.7p1commerce

magento magentoMatch2.3.7p2commerce

magento magentoMatch2.3.7p3commerce

magento magentoMatch2.4.3-commerce

magento magentoMatch2.4.3p1commerce

magento magentoMatch2.4.3p2commerce

magento magentoMatch2.4.4-commerce

[
  {
    "product": "Magento Commerce",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2.4.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.3.7-p3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.4.3-p2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]