Adobe Commerce Impacted by XSS Vulnerability Requiring User Interaction

CVE-2024-45116

What is CVE-2024-45116?

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, and earlier exhibit a Cross-Site Scripting vulnerability that allows attackers to execute arbitrary code. This vulnerability can be exploited if an administrator tricks a legitimate user into clicking a specially crafted link or submitting a malicious form. The exploitation relies on user interaction, which can result in unauthorized script execution within the user's browser, significantly compromising the confidentiality and integrity of the system. Organizations using affected versions should prioritize the implementation of available security updates to mitigate the potential risks associated.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References