Lucene search

K
nvd[email protected]NVD:CVE-2024-20716
HistoryFeb 15, 2024 - 2:15 p.m.

CVE-2024-20716

2024-02-1514:15:45
CWE-400
web.nvd.nist.gov
adobe commerce
uncontrolled resource consumption
denial-of-service
high-privileged attacker
exploitation

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to an application denial-of-service. A high-privileged attacker could leverage this vulnerability to exhaust system resources, causing the application to slow down or crash. Exploitation of this issue does not require user interaction.

Affected configurations

NVD
Node
adobecommerceMatch2.4.4-
OR
adobecommerceMatch2.4.4p1
OR
adobecommerceMatch2.4.4p2
OR
adobecommerceMatch2.4.4p3
OR
adobecommerceMatch2.4.4p4
OR
adobecommerceMatch2.4.4p5
OR
adobecommerceMatch2.4.4p6
OR
adobecommerceMatch2.4.5-
OR
adobecommerceMatch2.4.5p1
OR
adobecommerceMatch2.4.5p2
OR
adobecommerceMatch2.4.5p3
OR
adobecommerceMatch2.4.5p4
OR
adobecommerceMatch2.4.5p5
OR
adobecommerceMatch2.4.6-
OR
adobecommerceMatch2.4.6p1
OR
adobecommerceMatch2.4.6p2
OR
adobecommerceMatch2.4.6p3

4.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.1%

Related for NVD:CVE-2024-20716