CVE-2025-27189

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by a Cross-Site Request Forgery CSRF vulnerability that could be exploited to cause a denial-of-service condition. An attacker could trick a logged-in user into submitting a forged request to th...

CVE-2025-27189

creationtimestamp| type| source ---|---|--- 2025-04-09 00:02:44+00:00| seen| https://t.me/cvedetector/22515 2025-04-09 01:22:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmdtbh526s2i...

CVE-2025-27189 Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by a Cross-Site Request Forgery CSRF vulnerability that could be exploited to cause a denial-of-service condition. An attacker could trick a logged-in user into submitting a forged request to th...

CVE-2025-27189

Adobe Commerce (Magento) is affected by a CSRF vulnerability across versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier. The issue allows an attacker to trick a logged-in user into submitting a forged request, potentially causing service disruption (denial of service) and r...