Description

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.

Remediation

References

CVE-2022-24086

Related Vulnerabilities

WordPress Plugin PICA Photo Gallery 'imgname' Parameter Information Disclosure (1.0)

Java Unspesificed Vulnerability (CVE-2019-2816)

WordPress Plugin Complianz-GDPR/CCPA Cookie Consent Cross-Site Scripting (6.4.1)

WordPress Plugin HTML5 AV Manager for WordPress 'custom.php' Arbitrary File Upload (0.2.7)

PHP Other Vulnerability (CVE-2007-1412)

Severity

Critical

Classification

CVE-2022-24086 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities