Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8mmj-xmj8-554p

Опубликовано: 14 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site, potentially enabling credential theft and account takeover. Exploitation of this issue requires user interaction in that a victim must click on a malicious link.

Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site, potentially enabling credential theft and account takeover. Exploitation of this issue requires user interaction in that a victim must click on a malicious link.

EPSS

Процентиль: 28%
0.00353
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 4.3
nvd
18 дней назад

Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site, potentially enabling credential theft and account takeover. Exploitation of this issue requires user interaction in that a victim must click on a malicious link.

CVSS3: 4.3
fstec
18 дней назад

Уязвимость программных платформ для разработки и управления онлайн магазинами Magento Open Source, Adobe Commerce и Adobe Commerce B2B, связанная с переадресацией URL на ненадежный сайт, позволяющая нарушителю обойти ограничения безопасности

EPSS

Процентиль: 28%
0.00353
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-601