CVE-2024-39401

Summary

CVE-2024-39401 is a newly disclosed OS Command Injection vulnerability affecting Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9, and earlier. This issue arises due to improper neutralization of special elements, allowing an admin attacker to execute arbitrary code through OS commands. User interaction is required to exploit this vulnerability, and the attacker's scope is changed upon successful exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.