CVE-2024-39419

Summary

CVE-2024-39419 is a newly disclosed Improper Authorization vulnerability that affects Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9, and earlier. This issue allows a low-privileged attacker to bypass security measures without user interaction, potentially enabling the modification of minor information. The vulnerability could result in a Security feature bypass, posing a significant risk to affected systems. Organizations using the identified Adobe Commerce versions are urged to apply the forthcoming patch to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.