CVE-2024-45125

Summary

CVE-2024-45125 is a newly disclosed Incorrect Authorization vulnerability that impacts Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10, and earlier. This issue allows a low-privileged attacker to bypass a security feature without user interaction, potentially resulting in a low-impact compromise of data integrity. Unauthorized access to restricted functions or data could be the consequence of successful exploitation. Organizations using affected versions of Adobe Commerce are urged to apply the latest patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.