Path Traversal Vulnerability in Adobe Commerce Products

CVE-2025-49559

What is CVE-2025-49559?

Adobe Commerce is susceptible to a path traversal vulnerability in multiple versions which allows attackers to bypass intended security measures. Attackers can exploit this weakness to modify limited data without requiring any user interaction, potentially leading to unauthorized access and manipulation of files within the application. The flaw affects Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, and earlier updates, emphasizing the necessity for timely patching to mitigate potential threats.

References