Input validation

2023-09-1208:15:00

PRIOn knowledge base

www.prio-n.com

adobe commerce

input validation

vulnerability

arbitrary code execution

nvd

0.001 Low

EPSS

Percentile

43.2%

JSON

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

CPENameOperatorVersion
commerceeq2.3.7 p1
commerceeq2.4.3 p1
commerceeq2.4.3
commerceeq2.3.7 p2
commercege2.4.0
commercelt2.4.3
commercelt2.3.7
magento_open_sourceeq2.3.7 p1
magento_open_sourceeq2.4.3 p1
magento_open_sourceeq2.4.3

Name	Operator	Version
commerce	eq	2.3.7 p1
commerce	eq	2.4.3 p1
commerce	eq	2.4.3
commerce	eq	2.3.7 p2
commerce	ge	2.4.0
commerce	lt	2.4.3
commerce	lt	2.3.7
magento_open_source	eq	2.3.7 p1
magento_open_source	eq	2.4.3 p1
magento_open_source	eq	2.4.3

Rows per page:

1-10 of 141

References

helpx.adobe.com/security/products/magento/apsb22-13.html

0.001 Low

EPSS

Percentile

43.2%

JSON

Related for PRION:CVE-2022-24093