CVE-2024-25413

A XSLT Server Side injection vulnerability exists in the Import Jobs function of the FireBear Improved Import And Export plugin (v3.8.6) used with Adobe Commerce . This flaw allows an attacker to execute arbitrary commands by providing a crafted XSLT file . A proof-of-concept for this vulnerabili...