APSB22-38 : Security update available for Adobe Commerce

2022-08-0900:00:00

helpx.adobe.com

262

adobe commerce

magento

security update

arbitrary code execution

privilege escalation

security feature bypass

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.005

Percentile

77.1%

JSON

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important and moderate vulnerabilities. Successful exploitation could lead to arbitrary code execution, privilege escalation and security feature bypass.

Affected configurations

Vulners

Node

adobeadobe_commerceRange≤2.4.3-p2

adobeadobe_commerceRange≤2.3.7-p3

adobeadobe_commerceRange≤2.4.4

adobemagentoRange≤2.4.3-p2open_source

adobemagentoRange≤2.3.7-p3open_source

adobemagentoRange≤2.4.4open_source

VendorProductVersionCPE
adobeadobe_commerce*cpe:2.3:a:adobe:adobe_commerce:*:*:*:*:*:*:*:*
adobemagento*cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*