Medium WID-SEC-2024-3420 1 CVE

Adobe Magento: Schwachstelle ermöglicht Codeausführung

Published Nov 12, 2024 · Updated Nov 12, 2024 · de-DE

Vendor: Adobe Product: Magento Platform: Windows

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Adobe Magento ausnutzen, um beliebigen Programmcode auszuführen.

Product

Magento ist ein Online-Shop System von Adobe.

Vulnerabilities 1

High 7.7

CVE-2024-49521

Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable …

Adobe Adobe Commerce

Nov 12, 2024

Revision history

2024-11-12 #1
Initiale Fassung

References

Adobe Security Bulletin APSB24-90 vom 2024-11-12
https://helpx.adobe.com/security/products/magento/apsb24-90.html