CVE-2024-39408

Summary

CVE-2024-39408 is a newly disclosed Cross-Site Request Forgery (CSRF) vulnerability affecting Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9, and older. This issue enables attackers to manipulate user actions, bypassing security features, and performing minor integrity changes. The exploitation requires user interaction, typically achieved through a victim clicking on a malicious link or opening a malicious page, leading to unintended requests being submitted on their behalf.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.