CVE-2024-34110

adobe commerce, adobe commerce webhooks, adobe magento

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-34110

Katalog CVE

CVSS 7.2 · High EPSS 1,4%

Kerentanan Unrestricted Upload of File with Dangerous Type pada adobe commerce, adobe commerce webhooks +1 lainnya. Skor CVSS 3.1 7.2 (High) menurut adobe.com.

Deskripsi (NVD)

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. A high-privilege attacker could exploit this vulnerability by uploading a malicious file to the system, which could then be executed. Exploitation of this issue does not require user interaction.

Rincian

Terbit di NVD
13 Juni 2024
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.2 (High), sumber adobe.com
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-434: Unrestricted Upload of File with Dangerous Type
EPSS (30 hari)
1,4% peluang dieksploitasi; lebih tinggi dari 71,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
adobe commerce Versi 2.3.7
adobe commerce Versi 2.3.7 p1
adobe commerce Versi 2.3.7 p2
adobe commerce Versi 2.3.7 p3
adobe commerce Versi 2.3.7 p4
adobe commerce Versi 2.3.7 p4-ext1
adobe commerce Versi 2.3.7 p4-ext2
adobe commerce Versi 2.3.7 p4-ext3
adobe commerce Versi 2.3.7 p4-ext4
adobe commerce Versi 2.4.0
adobe commerce Versi 2.4.0 ext-1
adobe commerce Versi 2.4.0 ext-2
adobe commerce Versi 2.4.0 ext-3
adobe commerce Versi 2.4.0 ext-4
adobe commerce Versi 2.4.1
adobe commerce Versi 2.4.1 ext-1
adobe commerce Versi 2.4.1 ext-2
adobe commerce Versi 2.4.1 ext-3
adobe commerce Versi 2.4.1 ext-4
adobe commerce Versi 2.4.2
adobe commerce Versi 2.4.2 ext-1
adobe commerce Versi 2.4.2 ext-2
adobe commerce Versi 2.4.2 ext-3
adobe commerce Versi 2.4.2 ext-4
adobe commerce Versi 2.4.3
adobe commerce Versi 2.4.3 ext-1
adobe commerce Versi 2.4.3 ext-2
adobe commerce Versi 2.4.3 ext-3
adobe commerce Versi 2.4.3 ext-4
adobe commerce Versi 2.4.4
adobe commerce Versi 2.4.4 p1
adobe commerce Versi 2.4.4 p2
adobe commerce Versi 2.4.4 p3
adobe commerce Versi 2.4.4 p4
adobe commerce Versi 2.4.4 p5
adobe commerce Versi 2.4.4 p6
adobe commerce Versi 2.4.5
adobe commerce Versi 2.4.5 p1
adobe commerce Versi 2.4.5 p2
adobe commerce Versi 2.4.5 p3
adobe commerce Versi 2.4.5 p4
adobe commerce Versi 2.4.5 p5
adobe commerce Versi 2.4.6
adobe commerce Versi 2.4.6 p1
adobe commerce Versi 2.4.6 p2
adobe commerce Versi 2.4.6 p3
adobe commerce webhooks Versi 1.2.0 hingga 1.4.0
adobe magento Versi 2.4.4
adobe magento Versi 2.4.4 p1
adobe magento Versi 2.4.4 p2
adobe magento Versi 2.4.4 p3
adobe magento Versi 2.4.4 p4
adobe magento Versi 2.4.4 p5
adobe magento Versi 2.4.4 p6
adobe magento Versi 2.4.4 p7
adobe magento Versi 2.4.4 p8
adobe magento Versi 2.4.5
adobe magento Versi 2.4.5 p1
adobe magento Versi 2.4.5 p2
adobe magento Versi 2.4.5 p3

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 71 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.