CVE-2023-38251 — Uncontrolled Resource Consumption in Adobe Commerce

CWE-400 — Uncontrolled Resource Consumption4 documents4 sources
Severity
5.3MEDIUMNVD
EPSS
0.2%
top 53.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Magento Community-editionAdobe CommerceMagento Project-community-edition+2 more
Timeline
PublishedOct 13

Description

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Uncontrolled Resource Consumption vulnerability that could lead in minor application denial-of-service. Exploitation of this issue does not require user interaction.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages5 packages

▶CVEListV5adobe/adobe_commerce2.4.7-beta1
▶NVDadobe/commerce9 versions+8
▶NVDadobe/magento4 versions+3
▶Packagistmagento/community-edition2.4.7-beta1 — 2.4.7-beta2+3

🔴Vulnerability Details

3
OSV
Magento Open Source allows Uncontrolled Resource Consumption↗2023-10-13
▶
CVEList
Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)↗2023-10-13
▶
GHSA
Magento Open Source allows Uncontrolled Resource Consumption↗2023-10-13
▶
CVE-2023-38251 — Uncontrolled Resource Consumption | cvebase