The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores lies in their lack of access control mechanisms. This allows attackers to trigger service interruptions.

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce online stores is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Magento Open Source has Improper Access Control vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to leak minor information of another user's account...

GHSA-GM4M-9RM8-7RXJ Magento Open Source has Improper Access Control vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to leak minor information of another user's account...

Magento Improper Access Control vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. An attacker with a low privilege account could leverage this vulnerability to perform an account takeover fo...

Magento stored Cross-Site Scripting (XSS) vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker with admin privileges to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be...

Magento Improper Access Control vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature...

Magento Improper Authorization vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to access other user's data. Exploitation of this issue does no...

Magento stored Cross-Site Scripting (XSS) vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s...

GHSA-FX9G-G9Q6-X3JX Magento Path Traversal vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could be abused by an attacker to inject malicious scripts into the vulnerable endpoint. A lo...

GHSA-RG7P-WMGJ-F374 Magento stored Cross-Site Scripting (XSS) vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s...

GHSA-R7MM-GRF3-5FJV Magento Improper Authorization vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to access other user's data. Exploitation of this issue does no...

GHSA-X95X-F4G9-MM85 Magento Improper Access Control vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. An attacker with a low privilege account could leverage this vulnerability to perform an account takeover fo...

GHSA-9WJF-94H3-R4RH Magento Improper Access Control vulnerability

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the availability of a user's minor feature...

Magento XML Injection vulnerability in the Widgets Module

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution. Exploitation of this issue does...

GHSA-CJ7W-PM77-HVG6 Magento XML Injection vulnerability in the Widgets Module

Adobe Commerce versions 2.4.3-p2 and earlier, 2.3.7-p3 and earlier and 2.4.4 and earlier are affected by an XML Injection vulnerability in the Widgets Module. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution. Exploitation of this issue does...

Adobe Magento Open Source 安全漏洞

Magento Open Source is provides basic e-commerce functionality, allowing you to build unique online stores from scratch. A security vulnerability exists in Adobe Magento Open Source, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor...

Adobe Magento Open Source 安全漏洞

Magento Open Source is provides basic e-commerce functionality, allowing you to build unique online stores from scratch. A security vulnerability exists in Adobe Magento Open Source, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor...

Magento Open Source 安全漏洞

Magento Open Source is provides basic e-commerce functionality, allowing you to build unique online stores from scratch. A security vulnerability exists in Adobe Magento Open Source, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor...

Adobe Magento Open Source 路径遍历漏洞

Magento Open Source is provides basic e-commerce functionality that allows you to build unique online stores from scratch. A path traversal vulnerability exists in Adobe Magento Open Source, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor...

APSB22-38 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution, privilege escalation and security feature bypass...