CVE-2025-24435
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2025-24435 is a newly disclosed vulnerability affecting Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11, and earlier. This issue involves improper access control, allowing a low-privileged attacker to bypass security measures and modify limited fields without user interaction. The vulnerability could potentially lead to privilege escalation, granting unauthorized access to sensitive information or functionality. Organizations using the affected Adobe Commerce versions are urged to apply the necessary patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Commerce
Affected Vendors
- Adobe