Lucene search

K
osvGoogleOSV:CVE-2023-29293
HistoryJun 15, 2023 - 7:15 p.m.

CVE-2023-29293

2023-06-1519:15:11
Google
osv.dev
5
adobe commerce
improper input validation
security feature bypass
admin privileged attacker
user's minor feature
exploitation

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

31.1%

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An admin privileged attacker could leverage this vulnerability to impact the availability of a user’s minor feature. Exploitation of this issue does not require user interaction.

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

AI Score

6.6

Confidence

Low

EPSS

0.001

Percentile

31.1%

Related for OSV:CVE-2023-29293