CVE-2024-45118
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Oct 10, 2024
CWE ID 284
Summary
CVE-2024-45118 is a newly disclosed vulnerability affecting Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10, and earlier. This issue involves an Improper Access Control vulnerability, which enables a low-privileged attacker to bypass critical security measures without user interaction. The consequences of exploiting this vulnerability can be severe, potentially leading to a significant compromise of data integrity. Adobe Commerce users are strongly urged to apply the necessary patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Commerce
Affected Vendors
- Adobe