GHSA-f8fv-f786-9933

ghsaUSosv

Magento improper input validation vulnerability

view advisory published 2022-02-17Licence: CC-BY-4.0

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-24086US	high10.0OT critical	99.2% (100th)	KEV	2022-02-16
Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of th…

references

External citations — patches, advisories, analysis.

https://github.com/magento/magento2PACKAGE
https://helpx.adobe.com/security/products/magento/apsb22-12.htmlWEB
https://nvd.nist.gov/vuln/detail/CVE-2022-24086ADVISORY
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-24086WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan