Adobe Commerce Vulnerable to Arbitrary Code Execution

CVE-2024-34108

Summary

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8, and earlier are exposed to a vulnerability due to improper input validation. This flaw can lead to arbitrary code execution within the context of the current user's session, putting sensitive information and system integrity at risk. Exploitation of this vulnerability does not necessitate user interaction but does require administrative privileges, thus widening its impact potential on affected systems. More details can be found in the official Adobe security advisory.

References