Adobe Commerce Under Attack: Unrestricted File Upload Vulnerability

CVE-2024-34110

Summary

Adobe Commerce versions 2.4.7 and earlier are susceptible to a vulnerability that allows high-privilege attackers to upload files of dangerous types. This flaw can lead to arbitrary code execution without requiring any user interaction, significantly compromising the security of affected systems. Organizations using the impacted versions need to take immediate action to mitigate potential risks and secure their platforms.

References