Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-85jx-x9r4-45m2

Опубликовано: 26 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 2.7

Описание

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not require user interaction.

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not require user interaction.

EPSS

Процентиль: 23%
0.00074
Низкий

2.7 Low

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 2.7
nvd
3 месяца назад

Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not require user interaction.

CVSS3: 2.7
fstec
3 месяца назад

Уязвимость программных платформ для разработки и управления онлайн магазинами Magento Open Source, Adobe Commerce и Adobe Commerce B2B, связанная с отсутствием авторизации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 23%
0.00074
Низкий

2.7 Low

CVSS3

Дефекты

CWE-863