Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xccm-gp2p-mc5g

Опубликовано: 08 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.6

Описание

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction. Scope is changed.

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction. Scope is changed.

EPSS

Процентиль: 35%
0.00409
Низкий

8.6 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 8.6
nvd
9 дней назад

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to restricted resources. Exploitation of this issue does not require user interaction. Scope is changed.

CVSS3: 8.6
fstec
10 дней назад

Уязвимость программных платформ для разработки и управления онлайн магазинами Magento Open Source, Adobe Commerce и Adobe Commerce B2B, связанная с недостатками процедуры авторизации, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 35%
0.00409
Низкий

8.6 High

CVSS3

Дефекты

CWE-863