Improper Access Control in Adobe Commerce Affects Multiple Versions

CVE-2025-24429

What is CVE-2025-24429?

Adobe Commerce is affected by an Improper Access Control vulnerability that allows a low-privileged attacker to bypass security features. This vulnerability grants unauthorized access without requiring user interaction, potentially leading to severe consequences for systems relying on these versions. It is crucial for organizations using affected versions to assess their exposure and apply necessary mitigations.

References