Improper Access Control in Adobe Commerce Products

CVE-2025-24437

What is CVE-2025-24437?

Adobe Commerce is affected by an Improper Access Control vulnerability that allows low-privileged attackers to bypass security measures and gain elevated privileges. Exploitation of this vulnerability does not require any user interaction, making it a significant risk for affected versions. The vulnerability can lead to unauthorized access and control over sensitive portions of the application, necessitating immediate attention and remediation.

References