CVE-2025-24434

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...

CVE-2025-24434

creationtimestamp| type| source ---|---|--- 2025-02-11 18:20:06+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwbjvyjru2g 2025-02-11 18:48:51+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113986746590747940 2025-02-11 21:33:35+00:00| seen|...

CVE-2025-24434 Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access...