CVE-2024-20716 — Uncontrolled Resource Consumption in Adobe Commerce

CWE-400 — Uncontrolled Resource Consumption4 documents4 sources
Severity
4.9MEDIUMNVD
EPSS
0.3%
top 49.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Magento Community-editionAdobe CommerceMagento Project-community-edition+1 more
Timeline
PublishedFeb 15

Description

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to an application denial-of-service. A high-privileged attacker could leverage this vulnerability to exhaust system resources, causing the application to slow down or crash. Exploitation of this issue does not require user interaction.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 1.2 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5adobe/adobe_commerce2.4.4-p6
▶NVDadobe/commerce2.4.4, 2.4.5, 2.4.6+2
▶Packagistmagento/community-edition2.4.6-p1 — 2.4.6-p4+2

🔴Vulnerability Details

3
GHSA
Magento Open Source allows Uncontrolled Resource Consumption↗2024-02-15
▶
OSV
Magento Open Source allows Uncontrolled Resource Consumption↗2024-02-15
▶
CVEList
Force high-usage of resources by generating unlimited coupons: Adobe Commerce↗2024-02-15
▶
CVE-2024-20716 — Uncontrolled Resource Consumption | cvebase