Cross-Site Request Forgery Vulnerability in Adobe Commerce

CVE-2025-27189

What is CVE-2025-27189?

Adobe Commerce is susceptible to a Cross-Site Request Forgery (CSRF) vulnerability that can lead to a denial-of-service situation. Attackers can exploit this flaw by deceiving authenticated users into executing unintended actions through forged requests. This typically involves user interaction, such as clicking on malicious links or accessing compromised websites, potentially disrupting the availability of the service and affecting user experience.

References