Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Adobe Magento Commerce — helpx.adobe.com/security/products/magento/apsb23-42.html Clear all filters
TI-2023-19620 CVE-2023-38208 · GHSA-mxc9-g6m4-2v35

OS command injection in Adobe Magento Commerce

Priority MEDIUM 46

Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerabilit…

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0255 Published 2023-08-09 Fixed in 2.4.6-p2, 2.4.5-p4 +1 CWE-78
TI-2023-19621 CVE-2023-38209 · GHSA-3vg2-v639-6ch9

Adobe Commerce Incorrect Authorization Security feature bypass

Priority LOW 31

Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Incorrect Authorization vulnerability that could lead to a Security feature bypass.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00973 Published 2023-08-09 Fixed in 2.4.6-p2, 2.4.5-p4 +1 CWE-863