Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2024-20758

🗓️ 10 Apr 2024 12:15:08Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 41 Views

Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but the attack complexity is high

Related
Detection
Refs
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC		Magento Open Source Code Execution
22 May 202400:00
–bdu_fstec
circl
Circl		CVE-2024-20758
14 Feb 202510:03
–circl
cnnvd
CNNVD		Adobe Commerce input validation vulnerability
10 Apr 202400:00
–cnnvd
cnvd
CNVD		Adobe Commerce Input Validation Error Vulnerability (CNVD-2024-19008)
12 Apr 202400:00
–cnvd
cve
CVE		CVE-2024-20758
10 Apr 202411:49
–cve
cvelist
Cvelist		CVE-2024-20758 Adobe Commerce | Improper Input Validation (CWE-20)
10 Apr 202411:49
–cvelist
euvd
EUVD		EUVD-2024-18473
3 Oct 202520:07
–euvd
github
Github Security Blog		Magento Open Source allows Improper Input Validation
10 Apr 202415:30
–github
mend
Mend		CVE-2024-20758
10 Apr 202411:49
–mend
osv_bit
osv_bit		BIT-MAGENTO-2024-20758
12 Apr 202407:21
–osv_bit
Rows per page
NVD
Node
OR
adobecommerceMatch-
adobecommerceMatch2.3.7-
adobecommerceMatch2.3.7p1
adobecommerceMatch2.3.7p2
adobecommerceMatch2.3.7p3
adobecommerceMatch2.3.7p4
adobecommerceMatch2.3.7p4-ext1
adobecommerceMatch2.3.7p4-ext2
adobecommerceMatch2.3.7p4-ext3
adobecommerceMatch2.3.7p4-ext4
adobecommerceMatch2.4.0-
adobecommerceMatch2.4.0ext-1
adobecommerceMatch2.4.0ext-2
adobecommerceMatch2.4.0ext-3
adobecommerceMatch2.4.0ext-4
adobecommerceMatch2.4.1-
adobecommerceMatch2.4.1ext-1
adobecommerceMatch2.4.1ext-2
adobecommerceMatch2.4.1ext-3
adobecommerceMatch2.4.1ext-4
adobecommerceMatch2.4.2-
adobecommerceMatch2.4.2ext-1
adobecommerceMatch2.4.2ext-2
adobecommerceMatch2.4.2ext-3
adobecommerceMatch2.4.2ext-4
adobecommerceMatch2.4.2ext-6
adobecommerceMatch2.4.2p1
adobecommerceMatch2.4.2p2
adobecommerceMatch2.4.3-
adobecommerceMatch2.4.3ext-1
adobecommerceMatch2.4.3ext-2
adobecommerceMatch2.4.3ext-3
adobecommerceMatch2.4.3ext-4
adobecommerceMatch2.4.3ext-6
adobecommerceMatch2.4.3p1
adobecommerceMatch2.4.3p2
adobecommerceMatch2.4.4-
adobecommerceMatch2.4.4p1
adobecommerceMatch2.4.4p2
adobecommerceMatch2.4.4p3
adobecommerceMatch2.4.4p4
adobecommerceMatch2.4.4p5
adobecommerceMatch2.4.4p6
adobecommerceMatch2.4.4p7
adobecommerceMatch2.4.5-
adobecommerceMatch2.4.5p1
adobecommerceMatch2.4.5p2
adobecommerceMatch2.4.5p3
adobecommerceMatch2.4.5p4
adobecommerceMatch2.4.5p5
adobecommerceMatch2.4.5p6
adobecommerceMatch2.4.6-
adobecommerceMatch2.4.6p1
adobecommerceMatch2.4.6p2
adobecommerceMatch2.4.6p3
adobecommerceMatch2.4.6p4
adobecommerceMatch2.4.7-
adobecommerceMatch2.4.7b1
adobecommerceMatch2.4.7b2
adobecommerceMatch2.4.7beta3
adobemagentoMatch2.4.4-open_source
adobemagentoMatch2.4.4p1open_source
adobemagentoMatch2.4.4p2open_source
adobemagentoMatch2.4.4p3open_source
adobemagentoMatch2.4.4p4open_source
adobemagentoMatch2.4.4p5open_source
adobemagentoMatch2.4.4p6open_source
adobemagentoMatch2.4.4p7open_source
adobemagentoMatch2.4.5-open_source
adobemagentoMatch2.4.5p1open_source
adobemagentoMatch2.4.5p2open_source
adobemagentoMatch2.4.5p3open_source
adobemagentoMatch2.4.5p4open_source
adobemagentoMatch2.4.5p5open_source
adobemagentoMatch2.4.5p6open_source
adobemagentoMatch2.4.6-open_source
adobemagentoMatch2.4.6p1open_source
adobemagentoMatch2.4.6p2open_source
adobemagentoMatch2.4.6p3open_source
adobemagentoMatch2.4.6p4open_source
adobemagentoMatch2.4.7-open_source
adobemagentoMatch2.4.7b1open_source
adobemagentoMatch2.4.7b2open_source
adobemagentoMatch2.4.7beta3open_source

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a demo
17 Jun 2026 07:07Current
9.4Critical risk
Vulners AI Score9.4
CVSS 3.19
EPSS0.01418
SSVC
CWE-20
adobe commerceinput validationarbitrary code executionexploitationcve-2024-20758
41