CVE-2022-24093

published 2023-09-12

CVE-2022-24093: Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability. Exploitation of this…

Priority P3 44 high 7.2 CVSS 3.1

AV N AC L PR H UI N S U C H I H A H

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

Affected

12 ranges

Vendor	Product	Version range	Fixed in
adobe	adobe_commerce	<= 2.3.7-p2	—
adobe	commerce	< 2.3.7	2.3.7
adobe	commerce	—	—
adobe	commerce	—	—
adobe	commerce	>= 2.4.0 < 2.4.3	2.4.3
adobe	magento_open_source	< 2.3.7	2.3.7
adobe	magento_open_source	—	—
adobe	magento_open_source	—	—
adobe	magento_open_source	>= 2.4.0 < 2.4.3	2.4.3
magento	community-edition	>= 2.3.7-p1 < 2.3.7-p3	2.3.7-p3
magento	community-edition	>= 2.4.3-p1 < 2.4.3-p2	2.4.3-p2
magento	project-community-edition	0 – 2.0.2	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20