Adobe Commerce Unrestricted Upload Vulnerability Could Lead to Arbitrary Code Execution

CVE-2024-39397

Summary

The vulnerability in Adobe Commerce relates to an unrestricted upload of files with dangerous types, allowing unauthorized actors to upload malicious files. This creates a significant risk as attackers can execute arbitrary code on the server hosting affected versions. The attack can be initiated without user interaction, although the complexity of the exploit is high. This vulnerability affects multiple versions of Adobe Commerce, highlighting the importance of prompt updates and security measures to protect against such exploits.

References