Adobe Commerce Incorrect Authorization Security feature bypass

CVE-2023-22248

What is CVE-2023-22248?

Adobe Commerce versions 2.4.6 and earlier, including 2.4.5-p2 and 2.4.4-p3, are affected by an Incorrect Authorization vulnerability that allows attackers to bypass security features. This issue can lead to unauthorized data leakage of another user's information without requiring any user interaction. Administrators should take immediate action to apply the necessary security updates to safeguard their systems from potential exploitation.

References