CVE-2022-34254

🗓️ 16 Aug 2022 19:44:17Reported by adobeType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 126 Views

Adobe Commerce 2.4.3-p2 and earlier, 2.3.7-p3 and earlier, and 2.4.4 and earlier versions are affected by Path Traversal vulnerability allowing for file reading and Stored XSS

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	Magento Path Traversal	3 Oct 202200:00	–	bdu_fstec
CNNVD	Adobe Magento Open Source 路径遍历漏洞	9 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-34254 Adobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution	16 Aug 202219:44	–	cvelist
EUVD	EUVD-2022-6554	3 Oct 202520:07	–	euvd
Github Security Blog	Magento Path Traversal vulnerability	17 Aug 202200:00	–	github
Mend	CVE-2022-34254	16 Aug 202219:44	–	mend
NVD	CVE-2022-34254	16 Aug 202221:15	–	nvd
osv_bit	BIT-MAGENTO-2022-34254	6 Mar 202410:56	–	osv_bit
osv_ghsa	GHSA-FX9G-G9Q6-X3JX Magento Path Traversal vulnerability	17 Aug 202200:00	–	osv_ghsa
Prion	Path traversal	16 Aug 202221:15	–	prion

NVD

Vulners

Node

adobe commerceRange2.3.0–2.3.7

adobe commerceRange2.4.0–2.4.3

adobe commerceMatch2.3.7-

adobe commerceMatch2.3.7p1

adobe commerceMatch2.3.7p2

adobe commerceMatch2.3.7p3

adobe commerceMatch2.4.3-

adobe commerceMatch2.4.3p1

adobe commerceMatch2.4.3p2

adobe commerceMatch2.4.4-

magento magentoRange2.3.0–2.3.7commerce

magento magentoRange2.4.0–2.4.3commerce

magento magentoMatch2.3.7-commerce

magento magentoMatch2.3.7p1commerce

magento magentoMatch2.3.7p2commerce

magento magentoMatch2.3.7p3commerce

magento magentoMatch2.4.3-commerce

magento magentoMatch2.4.3p1commerce

magento magentoMatch2.4.3p2commerce

magento magentoMatch2.4.4-commerce

[
  {
    "product": "Magento Commerce",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "2.4.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.3.7-p3",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2.4.3-p2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "None",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]