CVE-2024-45119

🗓️ 10 Oct 2024 09:57:58Reported by MendType

Admin-authenticated SSRF in Adobe Commerce allows arbitrary file system read.

Reporter	Title	Published	Views	Family All 16
Tenable Nessus	Adobe Commerce/Magento Open Source Multiple Vulnerabilities (APSB24-73)	23 Jul 202500:00	–	nessus
Tenable Nessus	Adobe Commerce B2B Multiple Vulnerabilities (APSB24-73)	23 Jul 202500:00	–	nessus
BDU FSTEC	The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B, related to lack of access control, allows attackers to bypass security restrictions and expose sensitive information.	18 Oct 202400:00	–	bdu_fstec
CNNVD	Adobe Commerce 代码问题漏洞	10 Oct 202400:00	–	cnnvd
CNVD	Adobe Commerce Server-Side Request Forgery Vulnerability	13 Oct 202400:00	–	cnvd
CVE	CVE-2024-45119	10 Oct 202409:57	–	cve
Cvelist	CVE-2024-45119 Adobe Commerce \| Server-Side Request Forgery (SSRF) (CWE-918)	10 Oct 202409:57	–	cvelist
EUVD	EUVD-2024-3046	3 Oct 202520:07	–	euvd
Github Security Blog	Magento Open Source Server-Side Request Forgery (SSRF) vulnerability	10 Oct 202412:31	–	github
NCSC	Vulnerabilities fixed in Adobe Commerce and Magento	9 Oct 202413:38	–	ncsc

Vulners

Node

magento magentoRange2.4.5-p1–2.4.5-p10

magento magentoRange2.4.6-p1–2.4.6-p8

magento magentoRange2.4.7-beta1–2.4.7-p3

magento magentoRange<2.4.4-p11

Source	Link
helpx	www.helpx.adobe.com/security/products/magento/apsb24-73.html
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45119.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-45119
github	www.github.com/magento/magento2

07 Oct 2026 02:16Current

CVSS 3.14.9

CVSS 46.9

EPSS0.00883

SSVC