CVE-2022-24086

Summary

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.

Affected Software

Weaknesses

• CWE-20: Improper Input Validation (CWE-20)

ADP Enrichment

CVE Program Container

Additional References

• https://helpx.adobe.com/security/products/magento/apsb22-12.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: active
  • Automatable: yes
  • Technical Impact: total

Additional References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-24086

References

• https://helpx.adobe.com/security/products/magento/apsb22-12.html

• ←Previous
• Next→