Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4jhj-rw84-72pf

Опубликовано: 14 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized read access. Exploitation of this issue does not require user interaction.

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized read access. Exploitation of this issue does not require user interaction.

5.3 Medium

CVSS3

Дефекты

CWE-863

Связанные уязвимости

nvd
4 месяца назад

Rejected reason: This CVE ID was issued in error by its CVE Numbering Authority.

5.3 Medium

CVSS3

Дефекты

CWE-863