CVE-2024-39418

Summary

CVE-2024-39418 is a newly discovered Improper Authorization vulnerability affecting Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9, and earlier. This issue allows a low-privileged attacker to bypass security measures, enabling unauthorized access to view and edit low-sensitivity information without user interaction. The vulnerability does not necessitate any form of user interaction to be exploited. Adobe Commerce users are advised to upgrade their systems to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.