WID-SEC-W-2023-2009

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Adobe Magento: Mehrere Schwachstellen

view advisory published 2023-08-08

Ein Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um Informationen offenzulegen, Code auszuführen oder seine Rechte zu erweitern.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2023-38209USmedium6.5OT elevated—
Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Incorrect Authorization vulnerability that could lead to a Secu…
CVE-2023-38208UShigh7.2—
Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Improper Neutralization of Special Elements used in an OS Comma…
CVE-2023-38207US——
Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by a XML Injection (aka Blind XPath Injection) vulnerability that cou…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan