CVE-2024-45119
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Published Oct 10, 2024
Updated: Dec 12, 2024
CWE ID 918
Summary
CVE-2024-45119 is a Server-Side Request Forgery (SSRF) vulnerability impacting Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10, and earlier. This issue allows an admin-privileged attacker to force the application to make arbitrary requests by injecting URLs. The attacker can exploit this vulnerability without user interaction, potentially leading to arbitrary file system read. This SSRF flaw poses a significant risk to affected Adobe Commerce installations.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Commerce
Affected Vendors
- Adobe