Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mvhx-35vh-qmc8

Опубликовано: 11 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass, with limited impact to integrity. Exploitation of this issue does not require user interaction.

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass, with limited impact to integrity. Exploitation of this issue does not require user interaction.

EPSS

Процентиль: 23%
0.00302
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 5.3
nvd
5 месяцев назад

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass, with limited impact to integrity. Exploitation of this issue does not require user interaction.

CVSS3: 5.3
fstec
5 месяцев назад

Уязвимость программных платформ для разработки и управления онлайн магазинами Magento Open Source, Adobe Commerce и Adobe Commerce B2B, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю обойти существующие механизмы безопасности

EPSS

Процентиль: 23%
0.00302
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-20