CVSS 4.9 · Medium EPSS 0,77%
Kerentanan Server-Side Request Forgery (SSRF) pada adobe commerce, adobe commerce b2b +1 lainnya. Skor CVSS 3.1 4.9 (Medium) menurut adobe.com.
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| adobe | commerce | Versi 2.4.4 |
| adobe | commerce | Versi 2.4.4 p1 |
| adobe | commerce | Versi 2.4.4 p10 |
| adobe | commerce | Versi 2.4.4 p2 |
| adobe | commerce | Versi 2.4.4 p3 |
| adobe | commerce | Versi 2.4.4 p4 |
| adobe | commerce | Versi 2.4.4 p5 |
| adobe | commerce | Versi 2.4.4 p6 |
| adobe | commerce | Versi 2.4.4 p7 |
| adobe | commerce | Versi 2.4.4 p8 |
| adobe | commerce | Versi 2.4.4 p9 |
| adobe | commerce | Versi 2.4.5 |
| adobe | commerce | Versi 2.4.5 p1 |
| adobe | commerce | Versi 2.4.5 p2 |
| adobe | commerce | Versi 2.4.5 p3 |
| adobe | commerce | Versi 2.4.5 p4 |
| adobe | commerce | Versi 2.4.5 p5 |
| adobe | commerce | Versi 2.4.5 p6 |
| adobe | commerce | Versi 2.4.5 p7 |
| adobe | commerce | Versi 2.4.5 p8 |
| adobe | commerce | Versi 2.4.5 p9 |
| adobe | commerce | Versi 2.4.6 |
| adobe | commerce | Versi 2.4.6 p1 |
| adobe | commerce | Versi 2.4.6 p2 |
| adobe | commerce | Versi 2.4.6 p3 |
| adobe | commerce | Versi 2.4.6 p4 |
| adobe | commerce | Versi 2.4.6 p5 |
| adobe | commerce | Versi 2.4.6 p6 |
| adobe | commerce | Versi 2.4.6 p7 |
| adobe | commerce | Versi 2.4.7 |
| adobe | commerce | Versi 2.4.7 b1 |
| adobe | commerce | Versi 2.4.7 b2 |
| adobe | commerce | Versi 2.4.7 p1 |
| adobe | commerce | Versi 2.4.7 p2 |
| adobe | commerce b2b | Versi 1.3.3 |
| adobe | commerce b2b | Versi 1.3.3 p10 |
| adobe | commerce b2b | Versi 1.3.4 |
| adobe | commerce b2b | Versi 1.3.4 p9 |
| adobe | commerce b2b | Versi 1.3.5 |
| adobe | commerce b2b | Versi 1.3.5 p7 |
| adobe | commerce b2b | Versi 1.4.2 |
| adobe | commerce b2b | Versi 1.4.2 p1 |
| adobe | commerce b2b | Versi 1.4.2 p2 |
| adobe | magento | Versi 2.4.4 |
| adobe | magento | Versi 2.4.4 p1 |
| adobe | magento | Versi 2.4.4 p10 |
| adobe | magento | Versi 2.4.4 p2 |
| adobe | magento | Versi 2.4.4 p3 |
| adobe | magento | Versi 2.4.4 p4 |
| adobe | magento | Versi 2.4.4 p5 |
| adobe | magento | Versi 2.4.4 p6 |
| adobe | magento | Versi 2.4.4 p7 |
| adobe | magento | Versi 2.4.4 p8 |
| adobe | magento | Versi 2.4.4 p9 |
| adobe | magento | Versi 2.4.5 |
| adobe | magento | Versi 2.4.5 p1 |
| adobe | magento | Versi 2.4.5 p2 |
| adobe | magento | Versi 2.4.5 p3 |
| adobe | magento | Versi 2.4.5 p4 |
| adobe | magento | Versi 2.4.5 p5 |