Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2024-20758

🗓️ 10 Apr 2024 12:15:08Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 30 Views

Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but the attack complexity is high

Related
Detection
Refs
ReporterTitlePublishedViews
Family
BDU FSTEC		The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in insufficient validation of input data, allowing attackers to execute arbitrary code.
22 May 202400:00
–bdu_fstec
Circl		CVE-2024-20758
14 Feb 202510:03
–circl
CNNVD		Adobe Commerce 输入验证错误漏洞
10 Apr 202400:00
–cnnvd
CNVD		Adobe Commerce Input Validation Error Vulnerability (CNVD-2024-19008)
12 Apr 202400:00
–cnvd
CVE		CVE-2024-20758
10 Apr 202411:49
–cve
Cvelist		CVE-2024-20758 Adobe Commerce | Improper Input Validation (CWE-20)
10 Apr 202411:49
–cvelist
EUVD		EUVD-2024-18473
3 Oct 202520:07
–euvd
Github Security Blog		Magento Open Source allows Improper Input Validation
10 Apr 202415:30
–github
OSV		BIT-MAGENTO-2024-20758
12 Apr 202407:21
–osv
OSV		CVE-2024-20758 Adobe Commerce | Improper Input Validation (CWE-20)
10 Apr 202411:49
–osv
Rows per page
NVD
Node
OR
adobecommerceMatch-
adobecommerceMatch2.3.7-
adobecommerceMatch2.3.7p1
adobecommerceMatch2.3.7p2
adobecommerceMatch2.3.7p3
adobecommerceMatch2.3.7p4
adobecommerceMatch2.3.7p4-ext1
adobecommerceMatch2.3.7p4-ext2
adobecommerceMatch2.3.7p4-ext3
adobecommerceMatch2.3.7p4-ext4
adobecommerceMatch2.4.0-
adobecommerceMatch2.4.0ext-1
adobecommerceMatch2.4.0ext-2
adobecommerceMatch2.4.0ext-3
adobecommerceMatch2.4.0ext-4
adobecommerceMatch2.4.1-
adobecommerceMatch2.4.1ext-1
adobecommerceMatch2.4.1ext-2
adobecommerceMatch2.4.1ext-3
adobecommerceMatch2.4.1ext-4
adobecommerceMatch2.4.2-
adobecommerceMatch2.4.2ext-1
adobecommerceMatch2.4.2ext-2
adobecommerceMatch2.4.2ext-3
adobecommerceMatch2.4.2ext-4
adobecommerceMatch2.4.2ext-6
adobecommerceMatch2.4.2p1
adobecommerceMatch2.4.2p2
adobecommerceMatch2.4.3-
adobecommerceMatch2.4.3ext-1
adobecommerceMatch2.4.3ext-2
adobecommerceMatch2.4.3ext-3
adobecommerceMatch2.4.3ext-4
adobecommerceMatch2.4.3ext-6
adobecommerceMatch2.4.3p1
adobecommerceMatch2.4.3p2
adobecommerceMatch2.4.4-
adobecommerceMatch2.4.4p1
adobecommerceMatch2.4.4p2
adobecommerceMatch2.4.4p3
adobecommerceMatch2.4.4p4
adobecommerceMatch2.4.4p5
adobecommerceMatch2.4.4p6
adobecommerceMatch2.4.4p7
adobecommerceMatch2.4.5-
adobecommerceMatch2.4.5p1
adobecommerceMatch2.4.5p2
adobecommerceMatch2.4.5p3
adobecommerceMatch2.4.5p4
adobecommerceMatch2.4.5p5
adobecommerceMatch2.4.5p6
adobecommerceMatch2.4.6-
adobecommerceMatch2.4.6p1
adobecommerceMatch2.4.6p2
adobecommerceMatch2.4.6p3
adobecommerceMatch2.4.6p4
adobecommerceMatch2.4.7-
adobecommerceMatch2.4.7b1
adobecommerceMatch2.4.7b2
adobecommerceMatch2.4.7beta3
adobemagentoMatch2.4.4-open_source
adobemagentoMatch2.4.4p1open_source
adobemagentoMatch2.4.4p2open_source
adobemagentoMatch2.4.4p3open_source
adobemagentoMatch2.4.4p4open_source
adobemagentoMatch2.4.4p5open_source
adobemagentoMatch2.4.4p6open_source
adobemagentoMatch2.4.4p7open_source
adobemagentoMatch2.4.5-open_source
adobemagentoMatch2.4.5p1open_source
adobemagentoMatch2.4.5p2open_source
adobemagentoMatch2.4.5p3open_source
adobemagentoMatch2.4.5p4open_source
adobemagentoMatch2.4.5p5open_source
adobemagentoMatch2.4.5p6open_source
adobemagentoMatch2.4.6-open_source
adobemagentoMatch2.4.6p1open_source
adobemagentoMatch2.4.6p2open_source
adobemagentoMatch2.4.6p3open_source
adobemagentoMatch2.4.6p4open_source
adobemagentoMatch2.4.7-open_source
adobemagentoMatch2.4.7b1open_source
adobemagentoMatch2.4.7b2open_source
adobemagentoMatch2.4.7beta3open_source

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 07:07Current
9.4High risk
Vulners AI Score9.4
CVSS 3.19
EPSS0.01418
CWE-20
adobe commerceinput validationarbitrary code executionexploitationcve-2024-20758
30