Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/magento/community-edition@2.4.7-beta1
Typecomposer
Namespacemagento
Namecommunity-edition
Version2.4.7-beta1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version2.4.7-p8
Latest_non_vulnerable_version2.4.9-alpha3
Affected_by_vulnerabilities
0
url VCID-141w-faqu-w3ay
vulnerability_id VCID-141w-faqu-w3ay
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on integrity. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45130
reference_id
reference_type
scores
0
value 0.00083
scoring_system epss
scoring_elements 0.24388
published_at 2026-06-13T12:55:00Z
1
value 0.00083
scoring_system epss
scoring_elements 0.24182
published_at 2026-06-11T12:55:00Z
2
value 0.00083
scoring_system epss
scoring_elements 0.24378
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45130
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T14:01:33Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45130
reference_id CVE-2024-45130
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45130
4
reference_url https://github.com/advisories/GHSA-v3v6-jfvw-m576
reference_id GHSA-v3v6-jfvw-m576
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v3v6-jfvw-m576
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45130, GHSA-v3v6-jfvw-m576
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-141w-faqu-w3ay
1
url VCID-16es-u6cy-u3g8
vulnerability_id VCID-16es-u6cy-u3g8
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45149
reference_id
reference_type
scores
0
value 0.0014
scoring_system epss
scoring_elements 0.34043
published_at 2026-06-13T12:55:00Z
1
value 0.0014
scoring_system epss
scoring_elements 0.33844
published_at 2026-06-11T12:55:00Z
2
value 0.0014
scoring_system epss
scoring_elements 0.34021
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45149
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T14:05:46Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45149
reference_id CVE-2024-45149
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45149
4
reference_url https://github.com/advisories/GHSA-w7rg-7wq2-pjrw
reference_id GHSA-w7rg-7wq2-pjrw
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w7rg-7wq2-pjrw
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45149, GHSA-w7rg-7wq2-pjrw
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-16es-u6cy-u3g8
2
url VCID-1mpb-gzr2-53ar
vulnerability_id VCID-1mpb-gzr2-53ar
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on integrity. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45121
reference_id
reference_type
scores
0
value 0.00086
scoring_system epss
scoring_elements 0.24849
published_at 2026-06-11T12:55:00Z
1
value 0.00086
scoring_system epss
scoring_elements 0.25066
published_at 2026-06-13T12:55:00Z
2
value 0.00086
scoring_system epss
scoring_elements 0.25049
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45121
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T13:55:50Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45121
reference_id CVE-2024-45121
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45121
4
reference_url https://github.com/advisories/GHSA-2qhq-fw98-h6wg
reference_id GHSA-2qhq-fw98-h6wg
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2qhq-fw98-h6wg
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45121, GHSA-2qhq-fw98-h6wg
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1mpb-gzr2-53ar
3
url VCID-1vq9-br2m-dbby
vulnerability_id VCID-1vq9-br2m-dbby
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24438
reference_id
reference_type
scores
0
value 0.04462
scoring_system epss
scoring_elements 0.89376
published_at 2026-06-13T12:55:00Z
1
value 0.04462
scoring_system epss
scoring_elements 0.89331
published_at 2026-06-11T12:55:00Z
2
value 0.04462
scoring_system epss
scoring_elements 0.89368
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24438
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24438
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24438
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-14T04:55:43Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-8884-7rm9-mrx4
reference_id GHSA-8884-7rm9-mrx4
reference_type
scores
url https://github.com/advisories/GHSA-8884-7rm9-mrx4
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24438, GHSA-8884-7rm9-mrx4
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1vq9-br2m-dbby
4
url VCID-2t3q-pmg5-qyhn
vulnerability_id VCID-2t3q-pmg5-qyhn
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39405
reference_id
reference_type
scores
0
value 0.00233
scoring_system epss
scoring_elements 0.46511
published_at 2026-06-12T12:55:00Z
1
value 0.00233
scoring_system epss
scoring_elements 0.46522
published_at 2026-06-13T12:55:00Z
2
value 0.00233
scoring_system epss
scoring_elements 0.46366
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39405
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:13:21Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39405
reference_id CVE-2024-39405
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39405
4
reference_url https://github.com/advisories/GHSA-5g9f-7gqc-8hj4
reference_id GHSA-5g9f-7gqc-8hj4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5g9f-7gqc-8hj4
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39405, GHSA-5g9f-7gqc-8hj4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2t3q-pmg5-qyhn
5
url VCID-313z-h2v4-c3fr
vulnerability_id VCID-313z-h2v4-c3fr
summary Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24436
reference_id
reference_type
scores
0
value 0.0015
scoring_system epss
scoring_elements 0.3555
published_at 2026-06-12T12:55:00Z
1
value 0.0015
scoring_system epss
scoring_elements 0.35573
published_at 2026-06-13T12:55:00Z
2
value 0.0015
scoring_system epss
scoring_elements 0.35373
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24436
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24436
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24436
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-11T18:48:53Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-ghpr-6qhr-rpp8
reference_id GHSA-ghpr-6qhr-rpp8
reference_type
scores
url https://github.com/advisories/GHSA-ghpr-6qhr-rpp8
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24436, GHSA-ghpr-6qhr-rpp8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-313z-h2v4-c3fr
6
url VCID-368r-um85-k3d2
vulnerability_id VCID-368r-um85-k3d2
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures to view and edit low-sensitivity information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39418
reference_id
reference_type
scores
0
value 0.00328
scoring_system epss
scoring_elements 0.56297
published_at 2026-06-12T12:55:00Z
1
value 0.00328
scoring_system epss
scoring_elements 0.56311
published_at 2026-06-13T12:55:00Z
2
value 0.00328
scoring_system epss
scoring_elements 0.56177
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39418
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:08:28Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39418
reference_id CVE-2024-39418
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39418
4
reference_url https://github.com/advisories/GHSA-gvgf-pvh5-vjh4
reference_id GHSA-gvgf-pvh5-vjh4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gvgf-pvh5-vjh4
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39418, GHSA-gvgf-pvh5-vjh4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-368r-um85-k3d2
7
url VCID-3a8p-9krx-23e8
vulnerability_id VCID-3a8p-9krx-23e8
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access affecting Confidentiality and Integrity. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24411
reference_id
reference_type
scores
0
value 0.0011
scoring_system epss
scoring_elements 0.29093
published_at 2026-06-12T12:55:00Z
1
value 0.0011
scoring_system epss
scoring_elements 0.29113
published_at 2026-06-13T12:55:00Z
2
value 0.0011
scoring_system epss
scoring_elements 0.28891
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24411
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24411
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24411
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-14T04:55:40Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-36hw-x3cc-m258
reference_id GHSA-36hw-x3cc-m258
reference_type
scores
url https://github.com/advisories/GHSA-36hw-x3cc-m258
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24411, GHSA-36hw-x3cc-m258
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3a8p-9krx-23e8
8
url VCID-3s5p-wb18-13ge
vulnerability_id VCID-3s5p-wb18-13ge
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. A low-privileged attacker could exploit this vulnerability to gain access to files and directories that are outside the restricted directory. Exploitation of this issue does not require user interaction and scope is changed.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39399
reference_id
reference_type
scores
0
value 0.00842
scoring_system epss
scoring_elements 0.75268
published_at 2026-06-13T12:55:00Z
1
value 0.00842
scoring_system epss
scoring_elements 0.75184
published_at 2026-06-11T12:55:00Z
2
value 0.00842
scoring_system epss
scoring_elements 0.75254
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39399
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-08-14T14:09:03Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39399
reference_id CVE-2024-39399
reference_type
scores
0
value 7.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39399
4
reference_url https://github.com/advisories/GHSA-7r99-8wqp-h7pc
reference_id GHSA-7r99-8wqp-h7pc
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7r99-8wqp-h7pc
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39399, GHSA-7r99-8wqp-h7pc
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3s5p-wb18-13ge
9
url VCID-3uj4-thpr-cue1
vulnerability_id VCID-3uj4-thpr-cue1
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39407
reference_id
reference_type
scores
0
value 0.00243
scoring_system epss
scoring_elements 0.48
published_at 2026-06-12T12:55:00Z
1
value 0.00243
scoring_system epss
scoring_elements 0.48016
published_at 2026-06-13T12:55:00Z
2
value 0.00243
scoring_system epss
scoring_elements 0.47859
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39407
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:10:04Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39407
reference_id CVE-2024-39407
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39407
4
reference_url https://github.com/advisories/GHSA-cjm6-8mw8-2f8c
reference_id GHSA-cjm6-8mw8-2f8c
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cjm6-8mw8-2f8c
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39407, GHSA-cjm6-8mw8-2f8c
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3uj4-thpr-cue1
10
url VCID-466x-mpt9-gbgy
vulnerability_id VCID-466x-mpt9-gbgy
summary Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead in arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction and attack complexity is high as it requires knowledge of tooling beyond just using the UI.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38249
reference_id
reference_type
scores
0
value 0.01841
scoring_system epss
scoring_elements 0.83442
published_at 2026-06-13T12:55:00Z
1
value 0.01841
scoring_system epss
scoring_elements 0.83373
published_at 2026-06-11T12:55:00Z
2
value 0.01841
scoring_system epss
scoring_elements 0.83433
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38249
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38249
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-38249
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-50.html
reference_id apsb23-50.html
reference_type
scores
0
value 8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
2
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-26T21:49:36Z/
url https://helpx.adobe.com/security/products/magento/apsb23-50.html
4
reference_url https://github.com/advisories/GHSA-rq36-9f5f-2gw7
reference_id GHSA-rq36-9f5f-2gw7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rq36-9f5f-2gw7
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-beta2
purl pkg:composer/magento/community-edition@2.4.7-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-5edy-fp8q-97fp
12
vulnerability VCID-6d1u-exkw-hbfu
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-78hy-q8kh-kyh7
15
vulnerability VCID-7bmk-3ab2-9ba6
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-96hr-sbyj-27dw
20
vulnerability VCID-9gb1-p5qf-3kd2
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-bvfd-gs5b-dyg7
27
vulnerability VCID-ctrj-y3d6-a7dv
28
vulnerability VCID-cyy2-3rr3-jkc8
29
vulnerability VCID-d9zc-rh9p-4bde
30
vulnerability VCID-dktm-v3jw-f7de
31
vulnerability VCID-dsy7-gm7v-tqc8
32
vulnerability VCID-dytj-h56v-bke9
33
vulnerability VCID-e2t8-b5yy-zkhn
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-eusf-bc81-9uhv
36
vulnerability VCID-ferd-u8gt-akds
37
vulnerability VCID-fqkf-67fw-cyb8
38
vulnerability VCID-gac9-1nnp-67cc
39
vulnerability VCID-gakd-m2af-z7c2
40
vulnerability VCID-ggtj-fbzy-87fx
41
vulnerability VCID-gx3s-7cxk-pyfc
42
vulnerability VCID-gxbc-u5mr-f3c9
43
vulnerability VCID-gzga-qjaf-kugh
44
vulnerability VCID-h2ju-dedu-fqad
45
vulnerability VCID-j9e4-4xta-6qc5
46
vulnerability VCID-jnuu-9mt7-jyd5
47
vulnerability VCID-jyhf-huep-tya2
48
vulnerability VCID-kfct-k5af-n7fu
49
vulnerability VCID-kjc9-vrhf-hfav
50
vulnerability VCID-ktnj-j4xu-uufs
51
vulnerability VCID-kxjv-xm7r-hkhs
52
vulnerability VCID-mccb-abc5-9yfs
53
vulnerability VCID-ngx2-ewzf-xbd4
54
vulnerability VCID-ntst-nee5-63d3
55
vulnerability VCID-pb4n-m8cv-9bb7
56
vulnerability VCID-pcm6-819d-6uhm
57
vulnerability VCID-pfvk-8q6r-e7c5
58
vulnerability VCID-psnm-zaza-tuf9
59
vulnerability VCID-pu8a-r3v2-g7h9
60
vulnerability VCID-q68u-w433-tqb9
61
vulnerability VCID-qbx1-jqke-v7hf
62
vulnerability VCID-qh9p-8b9r-mufh
63
vulnerability VCID-qnpc-4r4b-3uhx
64
vulnerability VCID-rm7u-jwat-v7f1
65
vulnerability VCID-rw4d-b9yt-mbhz
66
vulnerability VCID-s45p-jru3-w3df
67
vulnerability VCID-s7t9-h2jx-9bgr
68
vulnerability VCID-t4gd-uv9g-ukh5
69
vulnerability VCID-twda-bvut-9bhp
70
vulnerability VCID-twdq-g82m-nqcp
71
vulnerability VCID-u9vz-axk1-fqfn
72
vulnerability VCID-vgz6-nvj3-xqft
73
vulnerability VCID-vwpg-z9en-6yej
74
vulnerability VCID-wfdz-b6c4-quhq
75
vulnerability VCID-wxkj-7zgv-x7bc
76
vulnerability VCID-xgh4-b9yn-dkh4
77
vulnerability VCID-xjd4-w9bn-mbex
78
vulnerability VCID-xmby-7b1y-v3cn
79
vulnerability VCID-xqc4-jf6e-abfg
80
vulnerability VCID-z97t-ffda-vfes
81
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta2
aliases CVE-2023-38249, GHSA-rq36-9f5f-2gw7
risk_score 3.6
exploitability 0.5
weighted_severity 7.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-466x-mpt9-gbgy
11
url VCID-4nqq-nrne-17a2
vulnerability_id VCID-4nqq-nrne-17a2
summary Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field. Scope is changed.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-54266
reference_id
reference_type
scores
0
value 0.00057
scoring_system epss
scoring_elements 0.18338
published_at 2026-06-12T12:55:00Z
1
value 0.00057
scoring_system epss
scoring_elements 0.1836
published_at 2026-06-13T12:55:00Z
2
value 0.00057
scoring_system epss
scoring_elements 0.18174
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-54266
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb25-94.html
reference_id apsb25-94.html
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-15T13:24:32Z/
url https://helpx.adobe.com/security/products/magento/apsb25-94.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-54266
reference_id CVE-2025-54266
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-54266
4
reference_url https://github.com/advisories/GHSA-pcrx-r49h-x2w5
reference_id GHSA-pcrx-r49h-x2w5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pcrx-r49h-x2w5
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p8
purl pkg:composer/magento/community-edition@2.4.7-p8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p8
1
url pkg:composer/magento/community-edition@2.4.8-p3
purl pkg:composer/magento/community-edition@2.4.8-p3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-p3
2
url pkg:composer/magento/community-edition@2.4.9-alpha3
purl pkg:composer/magento/community-edition@2.4.9-alpha3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha3
aliases CVE-2025-54266, GHSA-pcrx-r49h-x2w5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4nqq-nrne-17a2
12
url VCID-5edy-fp8q-97fp
vulnerability_id VCID-5edy-fp8q-97fp
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24417
reference_id
reference_type
scores
0
value 0.01321
scoring_system epss
scoring_elements 0.80361
published_at 2026-06-12T12:55:00Z
1
value 0.01321
scoring_system epss
scoring_elements 0.80377
published_at 2026-06-13T12:55:00Z
2
value 0.01321
scoring_system epss
scoring_elements 0.803
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24417
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24417
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24417
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-14T04:55:50Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-g3j6-9753-8mp2
reference_id GHSA-g3j6-9753-8mp2
reference_type
scores
url https://github.com/advisories/GHSA-g3j6-9753-8mp2
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24417, GHSA-g3j6-9753-8mp2
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5edy-fp8q-97fp
13
url VCID-6d1u-exkw-hbfu
vulnerability_id VCID-6d1u-exkw-hbfu
summary Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-54236
reference_id
reference_type
scores
0
value 0.72152
scoring_system epss
scoring_elements 0.98779
published_at 2026-06-13T12:55:00Z
1
value 0.72152
scoring_system epss
scoring_elements 0.98772
published_at 2026-06-11T12:55:00Z
2
value 0.72152
scoring_system epss
scoring_elements 0.98777
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-54236
1
reference_url https://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-27397
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-27397
2
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
3
reference_url https://nullsecurityx.codes/cve-2025-54236-sessionreaper-unauthenticated-rce-in-magento
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nullsecurityx.codes/cve-2025-54236-sessionreaper-unauthenticated-rce-in-magento
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-54236
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-54236
5
reference_url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-54236
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-54236
6
reference_url https://helpx.adobe.com/security/products/magento/apsb25-88.html
reference_id apsb25-88.html
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2025-10-24T14:08:30Z/
url https://helpx.adobe.com/security/products/magento/apsb25-88.html
7
reference_url https://github.com/advisories/GHSA-wh92-6q6g-px7j
reference_id GHSA-wh92-6q6g-px7j
reference_type
scores
url https://github.com/advisories/GHSA-wh92-6q6g-px7j
fixed_packages
aliases CVE-2025-54236, GHSA-wh92-6q6g-px7j
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6d1u-exkw-hbfu
14
url VCID-6v47-xgpq-zkgf
vulnerability_id VCID-6v47-xgpq-zkgf
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction and scope is changed.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39401
reference_id
reference_type
scores
0
value 0.0264
scoring_system epss
scoring_elements 0.86105
published_at 2026-06-13T12:55:00Z
1
value 0.0264
scoring_system epss
scoring_elements 0.86044
published_at 2026-06-11T12:55:00Z
2
value 0.0264
scoring_system epss
scoring_elements 0.86093
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39401
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:10:32Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39401
reference_id CVE-2024-39401
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39401
4
reference_url https://github.com/advisories/GHSA-8frp-pxq2-3gpq
reference_id GHSA-8frp-pxq2-3gpq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8frp-pxq2-3gpq
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39401, GHSA-8frp-pxq2-3gpq
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6v47-xgpq-zkgf
15
url VCID-78hy-q8kh-kyh7
vulnerability_id VCID-78hy-q8kh-kyh7
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45123
reference_id
reference_type
scores
0
value 0.01248
scoring_system epss
scoring_elements 0.79723
published_at 2026-06-11T12:55:00Z
1
value 0.01248
scoring_system epss
scoring_elements 0.79806
published_at 2026-06-13T12:55:00Z
2
value 0.01248
scoring_system epss
scoring_elements 0.79788
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45123
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T13:55:45Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45123
reference_id CVE-2024-45123
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45123
4
reference_url https://github.com/advisories/GHSA-88x2-cq34-5fwc
reference_id GHSA-88x2-cq34-5fwc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-88x2-cq34-5fwc
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45123, GHSA-88x2-cq34-5fwc
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-78hy-q8kh-kyh7
16
url VCID-7bmk-3ab2-9ba6
vulnerability_id VCID-7bmk-3ab2-9ba6
summary Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to elevated privileges that increase integrity impact to high. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-54267
reference_id
reference_type
scores
0
value 0.00065
scoring_system epss
scoring_elements 0.20657
published_at 2026-06-12T12:55:00Z
1
value 0.00065
scoring_system epss
scoring_elements 0.20679
published_at 2026-06-13T12:55:00Z
2
value 0.00065
scoring_system epss
scoring_elements 0.20479
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-54267
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb25-94.html
reference_id apsb25-94.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-10-16T03:56:04Z/
url https://helpx.adobe.com/security/products/magento/apsb25-94.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-54267
reference_id CVE-2025-54267
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-54267
4
reference_url https://github.com/advisories/GHSA-qvwr-p3hj-j6jf
reference_id GHSA-qvwr-p3hj-j6jf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qvwr-p3hj-j6jf
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p8
purl pkg:composer/magento/community-edition@2.4.7-p8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p8
1
url pkg:composer/magento/community-edition@2.4.8-p3
purl pkg:composer/magento/community-edition@2.4.8-p3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-p3
2
url pkg:composer/magento/community-edition@2.4.9-alpha3
purl pkg:composer/magento/community-edition@2.4.9-alpha3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha3
aliases CVE-2025-54267, GHSA-qvwr-p3hj-j6jf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7bmk-3ab2-9ba6
17
url VCID-7j68-gund-4qhp
vulnerability_id VCID-7j68-gund-4qhp
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect confidentiality. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45132
reference_id
reference_type
scores
0
value 0.00132
scoring_system epss
scoring_elements 0.32503
published_at 2026-06-12T12:55:00Z
1
value 0.00132
scoring_system epss
scoring_elements 0.32523
published_at 2026-06-13T12:55:00Z
2
value 0.00132
scoring_system epss
scoring_elements 0.3232
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45132
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T14:02:03Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45132
reference_id CVE-2024-45132
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45132
4
reference_url https://github.com/advisories/GHSA-5f64-ppmg-cvvm
reference_id GHSA-5f64-ppmg-cvvm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5f64-ppmg-cvvm
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45132, GHSA-5f64-ppmg-cvvm
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7j68-gund-4qhp
18
url VCID-8365-zgh2-w3cc
vulnerability_id VCID-8365-zgh2-w3cc
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39413
reference_id
reference_type
scores
0
value 0.00306
scoring_system epss
scoring_elements 0.54386
published_at 2026-06-12T12:55:00Z
1
value 0.00306
scoring_system epss
scoring_elements 0.54403
published_at 2026-06-13T12:55:00Z
2
value 0.00306
scoring_system epss
scoring_elements 0.54261
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39413
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:08:47Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39413
reference_id CVE-2024-39413
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39413
4
reference_url https://github.com/advisories/GHSA-8w5f-8992-g86j
reference_id GHSA-8w5f-8992-g86j
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8w5f-8992-g86j
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39413, GHSA-8w5f-8992-g86j
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8365-zgh2-w3cc
19
url VCID-8gwb-c3ck-37f8
vulnerability_id VCID-8gwb-c3ck-37f8
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on integrity. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45129
reference_id
reference_type
scores
0
value 0.00083
scoring_system epss
scoring_elements 0.24388
published_at 2026-06-13T12:55:00Z
1
value 0.00083
scoring_system epss
scoring_elements 0.24182
published_at 2026-06-11T12:55:00Z
2
value 0.00083
scoring_system epss
scoring_elements 0.24378
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45129
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T14:07:37Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45129
reference_id CVE-2024-45129
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45129
4
reference_url https://github.com/advisories/GHSA-m58h-998x-66f3
reference_id GHSA-m58h-998x-66f3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m58h-998x-66f3
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45129, GHSA-m58h-998x-66f3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8gwb-c3ck-37f8
20
url VCID-8hfe-bt2u-37f9
vulnerability_id VCID-8hfe-bt2u-37f9
summary Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead in arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction and attack complexity is high as it requires knowledge of tooling beyond just using the UI.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38221
reference_id
reference_type
scores
0
value 0.01841
scoring_system epss
scoring_elements 0.83442
published_at 2026-06-13T12:55:00Z
1
value 0.01841
scoring_system epss
scoring_elements 0.83373
published_at 2026-06-11T12:55:00Z
2
value 0.01841
scoring_system epss
scoring_elements 0.83433
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38221
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38221
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-38221
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-50.html
reference_id apsb23-50.html
reference_type
scores
0
value 8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
2
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-26T21:49:37Z/
url https://helpx.adobe.com/security/products/magento/apsb23-50.html
4
reference_url https://github.com/advisories/GHSA-ggr8-3hwx-4f2m
reference_id GHSA-ggr8-3hwx-4f2m
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-ggr8-3hwx-4f2m
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-beta2
purl pkg:composer/magento/community-edition@2.4.7-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-5edy-fp8q-97fp
12
vulnerability VCID-6d1u-exkw-hbfu
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-78hy-q8kh-kyh7
15
vulnerability VCID-7bmk-3ab2-9ba6
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-96hr-sbyj-27dw
20
vulnerability VCID-9gb1-p5qf-3kd2
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-bvfd-gs5b-dyg7
27
vulnerability VCID-ctrj-y3d6-a7dv
28
vulnerability VCID-cyy2-3rr3-jkc8
29
vulnerability VCID-d9zc-rh9p-4bde
30
vulnerability VCID-dktm-v3jw-f7de
31
vulnerability VCID-dsy7-gm7v-tqc8
32
vulnerability VCID-dytj-h56v-bke9
33
vulnerability VCID-e2t8-b5yy-zkhn
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-eusf-bc81-9uhv
36
vulnerability VCID-ferd-u8gt-akds
37
vulnerability VCID-fqkf-67fw-cyb8
38
vulnerability VCID-gac9-1nnp-67cc
39
vulnerability VCID-gakd-m2af-z7c2
40
vulnerability VCID-ggtj-fbzy-87fx
41
vulnerability VCID-gx3s-7cxk-pyfc
42
vulnerability VCID-gxbc-u5mr-f3c9
43
vulnerability VCID-gzga-qjaf-kugh
44
vulnerability VCID-h2ju-dedu-fqad
45
vulnerability VCID-j9e4-4xta-6qc5
46
vulnerability VCID-jnuu-9mt7-jyd5
47
vulnerability VCID-jyhf-huep-tya2
48
vulnerability VCID-kfct-k5af-n7fu
49
vulnerability VCID-kjc9-vrhf-hfav
50
vulnerability VCID-ktnj-j4xu-uufs
51
vulnerability VCID-kxjv-xm7r-hkhs
52
vulnerability VCID-mccb-abc5-9yfs
53
vulnerability VCID-ngx2-ewzf-xbd4
54
vulnerability VCID-ntst-nee5-63d3
55
vulnerability VCID-pb4n-m8cv-9bb7
56
vulnerability VCID-pcm6-819d-6uhm
57
vulnerability VCID-pfvk-8q6r-e7c5
58
vulnerability VCID-psnm-zaza-tuf9
59
vulnerability VCID-pu8a-r3v2-g7h9
60
vulnerability VCID-q68u-w433-tqb9
61
vulnerability VCID-qbx1-jqke-v7hf
62
vulnerability VCID-qh9p-8b9r-mufh
63
vulnerability VCID-qnpc-4r4b-3uhx
64
vulnerability VCID-rm7u-jwat-v7f1
65
vulnerability VCID-rw4d-b9yt-mbhz
66
vulnerability VCID-s45p-jru3-w3df
67
vulnerability VCID-s7t9-h2jx-9bgr
68
vulnerability VCID-t4gd-uv9g-ukh5
69
vulnerability VCID-twda-bvut-9bhp
70
vulnerability VCID-twdq-g82m-nqcp
71
vulnerability VCID-u9vz-axk1-fqfn
72
vulnerability VCID-vgz6-nvj3-xqft
73
vulnerability VCID-vwpg-z9en-6yej
74
vulnerability VCID-wfdz-b6c4-quhq
75
vulnerability VCID-wxkj-7zgv-x7bc
76
vulnerability VCID-xgh4-b9yn-dkh4
77
vulnerability VCID-xjd4-w9bn-mbex
78
vulnerability VCID-xmby-7b1y-v3cn
79
vulnerability VCID-xqc4-jf6e-abfg
80
vulnerability VCID-z97t-ffda-vfes
81
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta2
aliases CVE-2023-38221, GHSA-ggr8-3hwx-4f2m
risk_score 3.6
exploitability 0.5
weighted_severity 7.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8hfe-bt2u-37f9
21
url VCID-96hr-sbyj-27dw
vulnerability_id VCID-96hr-sbyj-27dw
summary Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Confidentiality and integrity are considered high due to having admin impact.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-20759
reference_id
reference_type
scores
0
value 0.01627
scoring_system epss
scoring_elements 0.82284
published_at 2026-06-11T12:55:00Z
1
value 0.01627
scoring_system epss
scoring_elements 0.82355
published_at 2026-06-13T12:55:00Z
2
value 0.01627
scoring_system epss
scoring_elements 0.82346
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-20759
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value 6.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-18.html
reference_id apsb24-18.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value 6.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-04-11T04:01:07Z/
url https://helpx.adobe.com/security/products/magento/apsb24-18.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-20759
reference_id CVE-2024-20759
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value 6.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-20759
4
reference_url https://github.com/advisories/GHSA-59vf-hjxc-f9c5
reference_id GHSA-59vf-hjxc-f9c5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-59vf-hjxc-f9c5
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7
purl pkg:composer/magento/community-edition@2.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-466x-mpt9-gbgy
13
vulnerability VCID-4b5p-wqtj-7kbe
14
vulnerability VCID-4nqq-nrne-17a2
15
vulnerability VCID-549e-3kmc-cyfw
16
vulnerability VCID-5edy-fp8q-97fp
17
vulnerability VCID-6d1u-exkw-hbfu
18
vulnerability VCID-6v47-xgpq-zkgf
19
vulnerability VCID-78hy-q8kh-kyh7
20
vulnerability VCID-7bmk-3ab2-9ba6
21
vulnerability VCID-7j68-gund-4qhp
22
vulnerability VCID-8365-zgh2-w3cc
23
vulnerability VCID-8gwb-c3ck-37f8
24
vulnerability VCID-9gb1-p5qf-3kd2
25
vulnerability VCID-9gbf-swtt-7bhz
26
vulnerability VCID-a6gj-zm14-aqhq
27
vulnerability VCID-ax9q-y1rb-33b2
28
vulnerability VCID-bfp1-cndf-d7d7
29
vulnerability VCID-bftg-2sea-57cv
30
vulnerability VCID-bvfd-gs5b-dyg7
31
vulnerability VCID-cyy2-3rr3-jkc8
32
vulnerability VCID-d9zc-rh9p-4bde
33
vulnerability VCID-dktm-v3jw-f7de
34
vulnerability VCID-dsy7-gm7v-tqc8
35
vulnerability VCID-dytj-h56v-bke9
36
vulnerability VCID-e2t8-b5yy-zkhn
37
vulnerability VCID-eban-ja9z-f7ep
38
vulnerability VCID-esjc-zzqy-nycf
39
vulnerability VCID-eusf-bc81-9uhv
40
vulnerability VCID-fb5x-afrq-87aj
41
vulnerability VCID-ferd-u8gt-akds
42
vulnerability VCID-fqkf-67fw-cyb8
43
vulnerability VCID-frhp-vgpt-g7am
44
vulnerability VCID-gac9-1nnp-67cc
45
vulnerability VCID-gakd-m2af-z7c2
46
vulnerability VCID-ggtj-fbzy-87fx
47
vulnerability VCID-gx3s-7cxk-pyfc
48
vulnerability VCID-gxbc-u5mr-f3c9
49
vulnerability VCID-gzga-qjaf-kugh
50
vulnerability VCID-h2ju-dedu-fqad
51
vulnerability VCID-j9e4-4xta-6qc5
52
vulnerability VCID-jc6r-vmnc-r3g9
53
vulnerability VCID-jeur-3jww-dqee
54
vulnerability VCID-jkrp-j7st-27f3
55
vulnerability VCID-jyhf-huep-tya2
56
vulnerability VCID-kf6b-mshs-23fa
57
vulnerability VCID-kfct-k5af-n7fu
58
vulnerability VCID-kjc9-vrhf-hfav
59
vulnerability VCID-ktnj-j4xu-uufs
60
vulnerability VCID-kxjv-xm7r-hkhs
61
vulnerability VCID-mccb-abc5-9yfs
62
vulnerability VCID-ngx2-ewzf-xbd4
63
vulnerability VCID-ntst-nee5-63d3
64
vulnerability VCID-pb4n-m8cv-9bb7
65
vulnerability VCID-pcm6-819d-6uhm
66
vulnerability VCID-pfvk-8q6r-e7c5
67
vulnerability VCID-psnm-zaza-tuf9
68
vulnerability VCID-pu8a-r3v2-g7h9
69
vulnerability VCID-q12a-kwpk-yufv
70
vulnerability VCID-q68u-w433-tqb9
71
vulnerability VCID-qbx1-jqke-v7hf
72
vulnerability VCID-qh9p-8b9r-mufh
73
vulnerability VCID-qnpc-4r4b-3uhx
74
vulnerability VCID-qr8w-qwb5-6uag
75
vulnerability VCID-rm7u-jwat-v7f1
76
vulnerability VCID-rw4d-b9yt-mbhz
77
vulnerability VCID-s45p-jru3-w3df
78
vulnerability VCID-s7t9-h2jx-9bgr
79
vulnerability VCID-t4gd-uv9g-ukh5
80
vulnerability VCID-twda-bvut-9bhp
81
vulnerability VCID-twdq-g82m-nqcp
82
vulnerability VCID-u52p-wrjp-quhk
83
vulnerability VCID-u9vz-axk1-fqfn
84
vulnerability VCID-vgz6-nvj3-xqft
85
vulnerability VCID-vwpg-z9en-6yej
86
vulnerability VCID-wfdz-b6c4-quhq
87
vulnerability VCID-wxkj-7zgv-x7bc
88
vulnerability VCID-xgh4-b9yn-dkh4
89
vulnerability VCID-xgk2-yecx-q3ff
90
vulnerability VCID-xjd4-w9bn-mbex
91
vulnerability VCID-xmby-7b1y-v3cn
92
vulnerability VCID-xqc4-jf6e-abfg
93
vulnerability VCID-z97t-ffda-vfes
94
vulnerability VCID-za87-d5x9-wuby
95
vulnerability VCID-zthr-mpwx-1fef
96
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7
aliases CVE-2024-20759, GHSA-59vf-hjxc-f9c5
risk_score 3.6
exploitability 0.5
weighted_severity 7.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-96hr-sbyj-27dw
22
url VCID-9gb1-p5qf-3kd2
vulnerability_id VCID-9gb1-p5qf-3kd2
summary Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability by manipulating the timing between the check of a resource's state and its use, allowing unauthorized write access. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-49558
reference_id
reference_type
scores
0
value 0.01616
scoring_system epss
scoring_elements 0.82286
published_at 2026-06-13T12:55:00Z
1
value 0.01616
scoring_system epss
scoring_elements 0.82215
published_at 2026-06-11T12:55:00Z
2
value 0.01616
scoring_system epss
scoring_elements 0.82277
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-49558
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-49558
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-49558
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-71.html
reference_id apsb25-71.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-13T15:04:13Z/
url https://helpx.adobe.com/security/products/magento/apsb25-71.html
4
reference_url https://github.com/advisories/GHSA-wcmw-8xpp-rwfj
reference_id GHSA-wcmw-8xpp-rwfj
reference_type
scores
url https://github.com/advisories/GHSA-wcmw-8xpp-rwfj
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p7
purl pkg:composer/magento/community-edition@2.4.7-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p7
1
url pkg:composer/magento/community-edition@2.4.8-p2
purl pkg:composer/magento/community-edition@2.4.8-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-p2
2
url pkg:composer/magento/community-edition@2.4.9-alpha2
purl pkg:composer/magento/community-edition@2.4.9-alpha2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha2
aliases CVE-2025-49558, GHSA-wcmw-8xpp-rwfj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9gb1-p5qf-3kd2
23
url VCID-9gbf-swtt-7bhz
vulnerability_id VCID-9gbf-swtt-7bhz
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24424
reference_id
reference_type
scores
0
value 0.00225
scoring_system epss
scoring_elements 0.45466
published_at 2026-06-12T12:55:00Z
1
value 0.00225
scoring_system epss
scoring_elements 0.45476
published_at 2026-06-13T12:55:00Z
2
value 0.00225
scoring_system epss
scoring_elements 0.45317
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24424
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24424
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24424
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-11T18:48:44Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-539v-w87w-w62c
reference_id GHSA-539v-w87w-w62c
reference_type
scores
url https://github.com/advisories/GHSA-539v-w87w-w62c
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24424, GHSA-539v-w87w-w62c
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9gbf-swtt-7bhz
24
url VCID-a6gj-zm14-aqhq
vulnerability_id VCID-a6gj-zm14-aqhq
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on integrity and availability. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45128
reference_id
reference_type
scores
0
value 0.00044
scoring_system epss
scoring_elements 0.13962
published_at 2026-06-11T12:55:00Z
1
value 0.00044
scoring_system epss
scoring_elements 0.14082
published_at 2026-06-13T12:55:00Z
2
value 0.00044
scoring_system epss
scoring_elements 0.14085
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45128
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T13:53:58Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45128
reference_id CVE-2024-45128
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45128
4
reference_url https://github.com/advisories/GHSA-qpp7-742q-58j3
reference_id GHSA-qpp7-742q-58j3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qpp7-742q-58j3
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45128, GHSA-qpp7-742q-58j3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a6gj-zm14-aqhq
25
url VCID-ax9q-y1rb-33b2
vulnerability_id VCID-ax9q-y1rb-33b2
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and have a low impact on integrity. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45124
reference_id
reference_type
scores
0
value 0.00098
scoring_system epss
scoring_elements 0.26913
published_at 2026-06-11T12:55:00Z
1
value 0.00098
scoring_system epss
scoring_elements 0.27134
published_at 2026-06-13T12:55:00Z
2
value 0.00098
scoring_system epss
scoring_elements 0.27116
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45124
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-10T13:54:17Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45124
reference_id CVE-2024-45124
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45124
4
reference_url https://github.com/advisories/GHSA-w3p2-pc3h-69wv
reference_id GHSA-w3p2-pc3h-69wv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w3p2-pc3h-69wv
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45124, GHSA-w3p2-pc3h-69wv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ax9q-y1rb-33b2
26
url VCID-bfp1-cndf-d7d7
vulnerability_id VCID-bfp1-cndf-d7d7
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45119
reference_id
reference_type
scores
0
value 0.00349
scoring_system epss
scoring_elements 0.5792
published_at 2026-06-13T12:55:00Z
1
value 0.00349
scoring_system epss
scoring_elements 0.57792
published_at 2026-06-11T12:55:00Z
2
value 0.00349
scoring_system epss
scoring_elements 0.57905
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45119
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T13:58:44Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45119
reference_id CVE-2024-45119
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45119
4
reference_url https://github.com/advisories/GHSA-g9fm-wc6h-pvgj
reference_id GHSA-g9fm-wc6h-pvgj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g9fm-wc6h-pvgj
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45119, GHSA-g9fm-wc6h-pvgj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bfp1-cndf-d7d7
27
url VCID-bftg-2sea-57cv
vulnerability_id VCID-bftg-2sea-57cv
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39419
reference_id
reference_type
scores
0
value 0.00233
scoring_system epss
scoring_elements 0.46511
published_at 2026-06-12T12:55:00Z
1
value 0.00233
scoring_system epss
scoring_elements 0.46522
published_at 2026-06-13T12:55:00Z
2
value 0.00233
scoring_system epss
scoring_elements 0.46366
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39419
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:08:00Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39419
reference_id CVE-2024-39419
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39419
4
reference_url https://github.com/advisories/GHSA-74w7-cr4v-wf2v
reference_id GHSA-74w7-cr4v-wf2v
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-74w7-cr4v-wf2v
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39419, GHSA-74w7-cr4v-wf2v
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bftg-2sea-57cv
28
url VCID-bvfd-gs5b-dyg7
vulnerability_id VCID-bvfd-gs5b-dyg7
summary Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-27190
reference_id
reference_type
scores
0
value 0.00266
scoring_system epss
scoring_elements 0.50515
published_at 2026-06-12T12:55:00Z
1
value 0.00266
scoring_system epss
scoring_elements 0.50533
published_at 2026-06-13T12:55:00Z
2
value 0.00266
scoring_system epss
scoring_elements 0.50382
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-27190
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-27190
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-27190
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-26.html
reference_id apsb25-26.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-08T20:53:02Z/
url https://helpx.adobe.com/security/products/magento/apsb25-26.html
4
reference_url https://github.com/advisories/GHSA-6wq7-cg9h-mj6q
reference_id GHSA-6wq7-cg9h-mj6q
reference_type
scores
url https://github.com/advisories/GHSA-6wq7-cg9h-mj6q
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p5
purl pkg:composer/magento/community-edition@2.4.7-p5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gakd-m2af-z7c2
8
vulnerability VCID-gx3s-7cxk-pyfc
9
vulnerability VCID-h2ju-dedu-fqad
10
vulnerability VCID-ktnj-j4xu-uufs
11
vulnerability VCID-pcm6-819d-6uhm
12
vulnerability VCID-twdq-g82m-nqcp
13
vulnerability VCID-xgh4-b9yn-dkh4
14
vulnerability VCID-xjd4-w9bn-mbex
15
vulnerability VCID-xqc4-jf6e-abfg
16
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p5
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-27190, GHSA-6wq7-cg9h-mj6q
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bvfd-gs5b-dyg7
29
url VCID-ctrj-y3d6-a7dv
vulnerability_id VCID-ctrj-y3d6-a7dv
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24434
reference_id
reference_type
scores
0
value 0.00215
scoring_system epss
scoring_elements 0.44257
published_at 2026-06-12T12:55:00Z
1
value 0.00215
scoring_system epss
scoring_elements 0.44276
published_at 2026-06-13T12:55:00Z
2
value 0.00215
scoring_system epss
scoring_elements 0.44103
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24434
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24434
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24434
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-02-14T04:55:37Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-fppq-f2m6-xv5c
reference_id GHSA-fppq-f2m6-xv5c
reference_type
scores
url https://github.com/advisories/GHSA-fppq-f2m6-xv5c
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24434, GHSA-fppq-f2m6-xv5c
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ctrj-y3d6-a7dv
30
url VCID-cyy2-3rr3-jkc8
vulnerability_id VCID-cyy2-3rr3-jkc8
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerability to read select data. Exploitation of this issue does not require user interaction
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24421
reference_id
reference_type
scores
0
value 0.0015
scoring_system epss
scoring_elements 0.3555
published_at 2026-06-12T12:55:00Z
1
value 0.0015
scoring_system epss
scoring_elements 0.35573
published_at 2026-06-13T12:55:00Z
2
value 0.0015
scoring_system epss
scoring_elements 0.35373
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24421
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24421
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24421
2
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-11T18:49:01Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
3
reference_url https://github.com/advisories/GHSA-v6r2-425c-hfrr
reference_id GHSA-v6r2-425c-hfrr
reference_type
scores
url https://github.com/advisories/GHSA-v6r2-425c-hfrr
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24421, GHSA-v6r2-425c-hfrr
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cyy2-3rr3-jkc8
31
url VCID-d9zc-rh9p-4bde
vulnerability_id VCID-d9zc-rh9p-4bde
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass allowing read only access. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue requires user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24429
reference_id
reference_type
scores
0
value 0.00182
scoring_system epss
scoring_elements 0.39865
published_at 2026-06-12T12:55:00Z
1
value 0.00182
scoring_system epss
scoring_elements 0.39889
published_at 2026-06-13T12:55:00Z
2
value 0.00182
scoring_system epss
scoring_elements 0.39695
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24429
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24429
reference_id
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24429
2
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 3.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-11T18:48:50Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
3
reference_url https://github.com/advisories/GHSA-656q-fx2w-8ccv
reference_id GHSA-656q-fx2w-8ccv
reference_type
scores
url https://github.com/advisories/GHSA-656q-fx2w-8ccv
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24429, GHSA-656q-fx2w-8ccv
risk_score 1.6
exploitability 0.5
weighted_severity 3.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d9zc-rh9p-4bde
32
url VCID-dktm-v3jw-f7de
vulnerability_id VCID-dktm-v3jw-f7de
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use of a resource, having a low impact on integrity. Exploitation of this issue requires user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45120
reference_id
reference_type
scores
0
value 0.00074
scoring_system epss
scoring_elements 0.22503
published_at 2026-06-11T12:55:00Z
1
value 0.00074
scoring_system epss
scoring_elements 0.2271
published_at 2026-06-13T12:55:00Z
2
value 0.00074
scoring_system epss
scoring_elements 0.22698
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45120
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 3.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T14:01:07Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45120
reference_id CVE-2024-45120
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45120
4
reference_url https://github.com/advisories/GHSA-47jp-46c9-25vf
reference_id GHSA-47jp-46c9-25vf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-47jp-46c9-25vf
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45120, GHSA-47jp-46c9-25vf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dktm-v3jw-f7de
33
url VCID-dsy7-gm7v-tqc8
vulnerability_id VCID-dsy7-gm7v-tqc8
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39415
reference_id
reference_type
scores
0
value 0.00306
scoring_system epss
scoring_elements 0.54386
published_at 2026-06-12T12:55:00Z
1
value 0.00306
scoring_system epss
scoring_elements 0.54403
published_at 2026-06-13T12:55:00Z
2
value 0.00306
scoring_system epss
scoring_elements 0.54261
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39415
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:13:06Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39415
reference_id CVE-2024-39415
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39415
4
reference_url https://github.com/advisories/GHSA-gj93-84g5-mcjq
reference_id GHSA-gj93-84g5-mcjq
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gj93-84g5-mcjq
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39415, GHSA-gj93-84g5-mcjq
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dsy7-gm7v-tqc8
34
url VCID-dytj-h56v-bke9
vulnerability_id VCID-dytj-h56v-bke9
summary Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in Privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to modify limited fields. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24435
reference_id
reference_type
scores
0
value 0.00188
scoring_system epss
scoring_elements 0.40659
published_at 2026-06-12T12:55:00Z
1
value 0.00188
scoring_system epss
scoring_elements 0.40682
published_at 2026-06-13T12:55:00Z
2
value 0.00188
scoring_system epss
scoring_elements 0.40491
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24435
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24435
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24435
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-11T18:49:16Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-82p4-55gj-956p
reference_id GHSA-82p4-55gj-956p
reference_type
scores
url https://github.com/advisories/GHSA-82p4-55gj-956p
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24435, GHSA-82p4-55gj-956p
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dytj-h56v-bke9
35
url VCID-e2t8-b5yy-zkhn
vulnerability_id VCID-e2t8-b5yy-zkhn
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An admin attacker could leverage this vulnerability to bypass security measures and have a low impact on integrity. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45135
reference_id
reference_type
scores
0
value 0.00144
scoring_system epss
scoring_elements 0.34446
published_at 2026-06-11T12:55:00Z
1
value 0.00144
scoring_system epss
scoring_elements 0.34647
published_at 2026-06-13T12:55:00Z
2
value 0.00144
scoring_system epss
scoring_elements 0.34623
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45135
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T14:00:24Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45135
reference_id CVE-2024-45135
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45135
4
reference_url https://github.com/advisories/GHSA-8pxg-gcp4-57ww
reference_id GHSA-8pxg-gcp4-57ww
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8pxg-gcp4-57ww
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45135, GHSA-8pxg-gcp4-57ww
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e2t8-b5yy-zkhn
36
url VCID-e9g4-n5c8-6yf9
vulnerability_id VCID-e9g4-n5c8-6yf9
summary Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Payload is stored in an admin area, resulting in high confidentiality and integrity impact.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38219
reference_id
reference_type
scores
0
value 0.0152
scoring_system epss
scoring_elements 0.81719
published_at 2026-06-13T12:55:00Z
1
value 0.0152
scoring_system epss
scoring_elements 0.8165
published_at 2026-06-11T12:55:00Z
2
value 0.0152
scoring_system epss
scoring_elements 0.8171
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38219
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38219
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-38219
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-50.html
reference_id apsb23-50.html
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value 2.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-26T21:49:34Z/
url https://helpx.adobe.com/security/products/magento/apsb23-50.html
4
reference_url https://github.com/advisories/GHSA-3j7w-jp46-9752
reference_id GHSA-3j7w-jp46-9752
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3j7w-jp46-9752
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-beta2
purl pkg:composer/magento/community-edition@2.4.7-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-5edy-fp8q-97fp
12
vulnerability VCID-6d1u-exkw-hbfu
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-78hy-q8kh-kyh7
15
vulnerability VCID-7bmk-3ab2-9ba6
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-96hr-sbyj-27dw
20
vulnerability VCID-9gb1-p5qf-3kd2
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-bvfd-gs5b-dyg7
27
vulnerability VCID-ctrj-y3d6-a7dv
28
vulnerability VCID-cyy2-3rr3-jkc8
29
vulnerability VCID-d9zc-rh9p-4bde
30
vulnerability VCID-dktm-v3jw-f7de
31
vulnerability VCID-dsy7-gm7v-tqc8
32
vulnerability VCID-dytj-h56v-bke9
33
vulnerability VCID-e2t8-b5yy-zkhn
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-eusf-bc81-9uhv
36
vulnerability VCID-ferd-u8gt-akds
37
vulnerability VCID-fqkf-67fw-cyb8
38
vulnerability VCID-gac9-1nnp-67cc
39
vulnerability VCID-gakd-m2af-z7c2
40
vulnerability VCID-ggtj-fbzy-87fx
41
vulnerability VCID-gx3s-7cxk-pyfc
42
vulnerability VCID-gxbc-u5mr-f3c9
43
vulnerability VCID-gzga-qjaf-kugh
44
vulnerability VCID-h2ju-dedu-fqad
45
vulnerability VCID-j9e4-4xta-6qc5
46
vulnerability VCID-jnuu-9mt7-jyd5
47
vulnerability VCID-jyhf-huep-tya2
48
vulnerability VCID-kfct-k5af-n7fu
49
vulnerability VCID-kjc9-vrhf-hfav
50
vulnerability VCID-ktnj-j4xu-uufs
51
vulnerability VCID-kxjv-xm7r-hkhs
52
vulnerability VCID-mccb-abc5-9yfs
53
vulnerability VCID-ngx2-ewzf-xbd4
54
vulnerability VCID-ntst-nee5-63d3
55
vulnerability VCID-pb4n-m8cv-9bb7
56
vulnerability VCID-pcm6-819d-6uhm
57
vulnerability VCID-pfvk-8q6r-e7c5
58
vulnerability VCID-psnm-zaza-tuf9
59
vulnerability VCID-pu8a-r3v2-g7h9
60
vulnerability VCID-q68u-w433-tqb9
61
vulnerability VCID-qbx1-jqke-v7hf
62
vulnerability VCID-qh9p-8b9r-mufh
63
vulnerability VCID-qnpc-4r4b-3uhx
64
vulnerability VCID-rm7u-jwat-v7f1
65
vulnerability VCID-rw4d-b9yt-mbhz
66
vulnerability VCID-s45p-jru3-w3df
67
vulnerability VCID-s7t9-h2jx-9bgr
68
vulnerability VCID-t4gd-uv9g-ukh5
69
vulnerability VCID-twda-bvut-9bhp
70
vulnerability VCID-twdq-g82m-nqcp
71
vulnerability VCID-u9vz-axk1-fqfn
72
vulnerability VCID-vgz6-nvj3-xqft
73
vulnerability VCID-vwpg-z9en-6yej
74
vulnerability VCID-wfdz-b6c4-quhq
75
vulnerability VCID-wxkj-7zgv-x7bc
76
vulnerability VCID-xgh4-b9yn-dkh4
77
vulnerability VCID-xjd4-w9bn-mbex
78
vulnerability VCID-xmby-7b1y-v3cn
79
vulnerability VCID-xqc4-jf6e-abfg
80
vulnerability VCID-z97t-ffda-vfes
81
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta2
aliases CVE-2023-38219, GHSA-3j7w-jp46-9752
risk_score 3.9
exploitability 0.5
weighted_severity 7.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e9g4-n5c8-6yf9
37
url VCID-esjc-zzqy-nycf
vulnerability_id VCID-esjc-zzqy-nycf
summary Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure vulnerability that could result in privilege escalation. A low-privileged attacker could gain unauthorized access to sensitive information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24408
reference_id
reference_type
scores
0
value 0.00377
scoring_system epss
scoring_elements 0.59828
published_at 2026-06-12T12:55:00Z
1
value 0.00377
scoring_system epss
scoring_elements 0.5984
published_at 2026-06-13T12:55:00Z
2
value 0.00377
scoring_system epss
scoring_elements 0.5972
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24408
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24408
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24408
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-11T18:49:13Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-3cfg-w257-cgf8
reference_id GHSA-3cfg-w257-cgf8
reference_type
scores
url https://github.com/advisories/GHSA-3cfg-w257-cgf8
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24408, GHSA-3cfg-w257-cgf8
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-esjc-zzqy-nycf
38
url VCID-eusf-bc81-9uhv
vulnerability_id VCID-eusf-bc81-9uhv
summary Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. A low-privileged attacker could leverage this vulnerability to bypass security measures and maintain unauthorized access. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-54263
reference_id
reference_type
scores
0
value 0.00092
scoring_system epss
scoring_elements 0.2613
published_at 2026-06-13T12:55:00Z
1
value 0.00092
scoring_system epss
scoring_elements 0.25914
published_at 2026-06-11T12:55:00Z
2
value 0.00092
scoring_system epss
scoring_elements 0.26114
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-54263
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb25-94.html
reference_id apsb25-94.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-10-21T03:55:29Z/
url https://helpx.adobe.com/security/products/magento/apsb25-94.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-54263
reference_id CVE-2025-54263
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-54263
4
reference_url https://github.com/advisories/GHSA-69x9-xp2j-w8g8
reference_id GHSA-69x9-xp2j-w8g8
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-69x9-xp2j-w8g8
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p8
purl pkg:composer/magento/community-edition@2.4.7-p8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p8
1
url pkg:composer/magento/community-edition@2.4.8-p3
purl pkg:composer/magento/community-edition@2.4.8-p3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-p3
2
url pkg:composer/magento/community-edition@2.4.9-alpha3
purl pkg:composer/magento/community-edition@2.4.9-alpha3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha3
aliases CVE-2025-54263, GHSA-69x9-xp2j-w8g8
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eusf-bc81-9uhv
39
url VCID-fb5x-afrq-87aj
vulnerability_id VCID-fb5x-afrq-87aj
summary Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Uncontrolled Resource Consumption vulnerability that could lead in minor application denial-of-service. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38251
reference_id
reference_type
scores
0
value 0.00232
scoring_system epss
scoring_elements 0.4631
published_at 2026-06-13T12:55:00Z
1
value 0.00232
scoring_system epss
scoring_elements 0.46154
published_at 2026-06-11T12:55:00Z
2
value 0.00232
scoring_system epss
scoring_elements 0.46298
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38251
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38251
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-38251
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-50.html
reference_id apsb23-50.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-26T21:50:04Z/
url https://helpx.adobe.com/security/products/magento/apsb23-50.html
4
reference_url https://github.com/advisories/GHSA-7pfc-834q-h497
reference_id GHSA-7pfc-834q-h497
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7pfc-834q-h497
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-beta2
purl pkg:composer/magento/community-edition@2.4.7-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-5edy-fp8q-97fp
12
vulnerability VCID-6d1u-exkw-hbfu
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-78hy-q8kh-kyh7
15
vulnerability VCID-7bmk-3ab2-9ba6
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-96hr-sbyj-27dw
20
vulnerability VCID-9gb1-p5qf-3kd2
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-bvfd-gs5b-dyg7
27
vulnerability VCID-ctrj-y3d6-a7dv
28
vulnerability VCID-cyy2-3rr3-jkc8
29
vulnerability VCID-d9zc-rh9p-4bde
30
vulnerability VCID-dktm-v3jw-f7de
31
vulnerability VCID-dsy7-gm7v-tqc8
32
vulnerability VCID-dytj-h56v-bke9
33
vulnerability VCID-e2t8-b5yy-zkhn
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-eusf-bc81-9uhv
36
vulnerability VCID-ferd-u8gt-akds
37
vulnerability VCID-fqkf-67fw-cyb8
38
vulnerability VCID-gac9-1nnp-67cc
39
vulnerability VCID-gakd-m2af-z7c2
40
vulnerability VCID-ggtj-fbzy-87fx
41
vulnerability VCID-gx3s-7cxk-pyfc
42
vulnerability VCID-gxbc-u5mr-f3c9
43
vulnerability VCID-gzga-qjaf-kugh
44
vulnerability VCID-h2ju-dedu-fqad
45
vulnerability VCID-j9e4-4xta-6qc5
46
vulnerability VCID-jnuu-9mt7-jyd5
47
vulnerability VCID-jyhf-huep-tya2
48
vulnerability VCID-kfct-k5af-n7fu
49
vulnerability VCID-kjc9-vrhf-hfav
50
vulnerability VCID-ktnj-j4xu-uufs
51
vulnerability VCID-kxjv-xm7r-hkhs
52
vulnerability VCID-mccb-abc5-9yfs
53
vulnerability VCID-ngx2-ewzf-xbd4
54
vulnerability VCID-ntst-nee5-63d3
55
vulnerability VCID-pb4n-m8cv-9bb7
56
vulnerability VCID-pcm6-819d-6uhm
57
vulnerability VCID-pfvk-8q6r-e7c5
58
vulnerability VCID-psnm-zaza-tuf9
59
vulnerability VCID-pu8a-r3v2-g7h9
60
vulnerability VCID-q68u-w433-tqb9
61
vulnerability VCID-qbx1-jqke-v7hf
62
vulnerability VCID-qh9p-8b9r-mufh
63
vulnerability VCID-qnpc-4r4b-3uhx
64
vulnerability VCID-rm7u-jwat-v7f1
65
vulnerability VCID-rw4d-b9yt-mbhz
66
vulnerability VCID-s45p-jru3-w3df
67
vulnerability VCID-s7t9-h2jx-9bgr
68
vulnerability VCID-t4gd-uv9g-ukh5
69
vulnerability VCID-twda-bvut-9bhp
70
vulnerability VCID-twdq-g82m-nqcp
71
vulnerability VCID-u9vz-axk1-fqfn
72
vulnerability VCID-vgz6-nvj3-xqft
73
vulnerability VCID-vwpg-z9en-6yej
74
vulnerability VCID-wfdz-b6c4-quhq
75
vulnerability VCID-wxkj-7zgv-x7bc
76
vulnerability VCID-xgh4-b9yn-dkh4
77
vulnerability VCID-xjd4-w9bn-mbex
78
vulnerability VCID-xmby-7b1y-v3cn
79
vulnerability VCID-xqc4-jf6e-abfg
80
vulnerability VCID-z97t-ffda-vfes
81
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta2
aliases CVE-2023-38251, GHSA-7pfc-834q-h497
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fb5x-afrq-87aj
40
url VCID-ferd-u8gt-akds
vulnerability_id VCID-ferd-u8gt-akds
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to a security feature bypass. An unauthenticated attacker could exploit this vulnerability to modify files that are stored outside the restricted directory. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24406
reference_id
reference_type
scores
0
value 0.00235
scoring_system epss
scoring_elements 0.46843
published_at 2026-06-13T12:55:00Z
1
value 0.00235
scoring_system epss
scoring_elements 0.46685
published_at 2026-06-11T12:55:00Z
2
value 0.00235
scoring_system epss
scoring_elements 0.46829
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24406
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24406
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24406
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-11T18:51:36Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-954p-ff72-327w
reference_id GHSA-954p-ff72-327w
reference_type
scores
url https://github.com/advisories/GHSA-954p-ff72-327w
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24406, GHSA-954p-ff72-327w
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ferd-u8gt-akds
41
url VCID-fqkf-67fw-cyb8
vulnerability_id VCID-fqkf-67fw-cyb8
summary Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to modify limited data. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-49559
reference_id
reference_type
scores
0
value 0.02291
scoring_system epss
scoring_elements 0.85121
published_at 2026-06-12T12:55:00Z
1
value 0.02291
scoring_system epss
scoring_elements 0.8513
published_at 2026-06-13T12:55:00Z
2
value 0.02291
scoring_system epss
scoring_elements 0.85068
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-49559
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-49559
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-49559
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-71.html
reference_id apsb25-71.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2025-08-13T15:04:14Z/
url https://helpx.adobe.com/security/products/magento/apsb25-71.html
4
reference_url https://github.com/advisories/GHSA-h4f4-gv6h-x824
reference_id GHSA-h4f4-gv6h-x824
reference_type
scores
url https://github.com/advisories/GHSA-h4f4-gv6h-x824
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p7
purl pkg:composer/magento/community-edition@2.4.7-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p7
1
url pkg:composer/magento/community-edition@2.4.8-p2
purl pkg:composer/magento/community-edition@2.4.8-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-p2
2
url pkg:composer/magento/community-edition@2.4.9-alpha2
purl pkg:composer/magento/community-edition@2.4.9-alpha2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha2
aliases CVE-2025-49559, GHSA-h4f4-gv6h-x824
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fqkf-67fw-cyb8
42
url VCID-gac9-1nnp-67cc
vulnerability_id VCID-gac9-1nnp-67cc
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this race condition to alter a condition after it has been checked but before it is used, potentially bypassing rate limiting mechanisms. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24432
reference_id
reference_type
scores
0
value 0.00103
scoring_system epss
scoring_elements 0.27887
published_at 2026-06-12T12:55:00Z
1
value 0.00103
scoring_system epss
scoring_elements 0.27912
published_at 2026-06-13T12:55:00Z
2
value 0.00103
scoring_system epss
scoring_elements 0.27686
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24432
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24432
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24432
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-11T19:09:50Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-7jmr-43qj-pw47
reference_id GHSA-7jmr-43qj-pw47
reference_type
scores
url https://github.com/advisories/GHSA-7jmr-43qj-pw47
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24432, GHSA-7jmr-43qj-pw47
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gac9-1nnp-67cc
43
url VCID-gakd-m2af-z7c2
vulnerability_id VCID-gakd-m2af-z7c2
summary Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue requires user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-49550
reference_id
reference_type
scores
0
value 0.00468
scoring_system epss
scoring_elements 0.65062
published_at 2026-06-13T12:55:00Z
1
value 0.00468
scoring_system epss
scoring_elements 0.64951
published_at 2026-06-11T12:55:00Z
2
value 0.00468
scoring_system epss
scoring_elements 0.65051
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-49550
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-49550
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-49550
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-50.html
reference_id apsb25-50.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-25T18:07:51Z/
url https://helpx.adobe.com/security/products/magento/apsb25-50.html
4
reference_url https://github.com/advisories/GHSA-8hcx-xvww-6c6h
reference_id GHSA-8hcx-xvww-6c6h
reference_type
scores
url https://github.com/advisories/GHSA-8hcx-xvww-6c6h
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p6
purl pkg:composer/magento/community-edition@2.4.7-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gx3s-7cxk-pyfc
8
vulnerability VCID-h2ju-dedu-fqad
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p6
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
2
url pkg:composer/magento/community-edition@2.4.9-alpha1
purl pkg:composer/magento/community-edition@2.4.9-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-ktnj-j4xu-uufs
9
vulnerability VCID-pcm6-819d-6uhm
10
vulnerability VCID-twdq-g82m-nqcp
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha1
aliases CVE-2025-49550, GHSA-8hcx-xvww-6c6h
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gakd-m2af-z7c2
44
url VCID-ggtj-fbzy-87fx
vulnerability_id VCID-ggtj-fbzy-87fx
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45122
reference_id
reference_type
scores
0
value 0.0012
scoring_system epss
scoring_elements 0.30485
published_at 2026-06-11T12:55:00Z
1
value 0.0012
scoring_system epss
scoring_elements 0.30701
published_at 2026-06-13T12:55:00Z
2
value 0.0012
scoring_system epss
scoring_elements 0.30682
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45122
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T13:59:49Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45122
reference_id CVE-2024-45122
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45122
4
reference_url https://github.com/advisories/GHSA-46fm-x82m-5f74
reference_id GHSA-46fm-x82m-5f74
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-46fm-x82m-5f74
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45122, GHSA-46fm-x82m-5f74
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ggtj-fbzy-87fx
45
url VCID-gx3s-7cxk-pyfc
vulnerability_id VCID-gx3s-7cxk-pyfc
summary Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction, and scope is unchanged.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-49556
reference_id
reference_type
scores
0
value 0.01048
scoring_system epss
scoring_elements 0.78008
published_at 2026-06-13T12:55:00Z
1
value 0.01048
scoring_system epss
scoring_elements 0.77927
published_at 2026-06-11T12:55:00Z
2
value 0.01048
scoring_system epss
scoring_elements 0.77994
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-49556
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-49556
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-49556
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-71.html
reference_id apsb25-71.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-13T14:18:25Z/
url https://helpx.adobe.com/security/products/magento/apsb25-71.html
4
reference_url https://github.com/advisories/GHSA-7hrj-3c9x-xv5h
reference_id GHSA-7hrj-3c9x-xv5h
reference_type
scores
url https://github.com/advisories/GHSA-7hrj-3c9x-xv5h
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p7
purl pkg:composer/magento/community-edition@2.4.7-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p7
1
url pkg:composer/magento/community-edition@2.4.8-p2
purl pkg:composer/magento/community-edition@2.4.8-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-p2
2
url pkg:composer/magento/community-edition@2.4.9-alpha2
purl pkg:composer/magento/community-edition@2.4.9-alpha2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha2
aliases CVE-2025-49556, GHSA-7hrj-3c9x-xv5h
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gx3s-7cxk-pyfc
46
url VCID-gxbc-u5mr-f3c9
vulnerability_id VCID-gxbc-u5mr-f3c9
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Confidentiality impact is high due to the attacker being able to exfiltrate sensitive information.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39403
reference_id
reference_type
scores
0
value 0.02812
scoring_system epss
scoring_elements 0.86514
published_at 2026-06-13T12:55:00Z
1
value 0.02812
scoring_system epss
scoring_elements 0.86453
published_at 2026-06-11T12:55:00Z
2
value 0.02812
scoring_system epss
scoring_elements 0.86504
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39403
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:08:14Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39403
reference_id CVE-2024-39403
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39403
4
reference_url https://github.com/advisories/GHSA-mmp7-8cg4-9wrg
reference_id GHSA-mmp7-8cg4-9wrg
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mmp7-8cg4-9wrg
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39403, GHSA-mmp7-8cg4-9wrg
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gxbc-u5mr-f3c9
47
url VCID-gzga-qjaf-kugh
vulnerability_id VCID-gzga-qjaf-kugh
summary Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24428
reference_id
reference_type
scores
0
value 0.0102
scoring_system epss
scoring_elements 0.7773
published_at 2026-06-13T12:55:00Z
1
value 0.0102
scoring_system epss
scoring_elements 0.77648
published_at 2026-06-11T12:55:00Z
2
value 0.0102
scoring_system epss
scoring_elements 0.77716
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24428
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24428
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24428
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-11T18:49:10Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-mm87-rrqx-94cr
reference_id GHSA-mm87-rrqx-94cr
reference_type
scores
url https://github.com/advisories/GHSA-mm87-rrqx-94cr
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24428, GHSA-mm87-rrqx-94cr
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gzga-qjaf-kugh
48
url VCID-h2ju-dedu-fqad
vulnerability_id VCID-h2ju-dedu-fqad
summary Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-54265
reference_id
reference_type
scores
0
value 0.00113
scoring_system epss
scoring_elements 0.29706
published_at 2026-06-13T12:55:00Z
1
value 0.00113
scoring_system epss
scoring_elements 0.29491
published_at 2026-06-11T12:55:00Z
2
value 0.00113
scoring_system epss
scoring_elements 0.29688
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-54265
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb25-94.html
reference_id apsb25-94.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-10-15T20:35:42Z/
url https://helpx.adobe.com/security/products/magento/apsb25-94.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-54265
reference_id CVE-2025-54265
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-54265
4
reference_url https://github.com/advisories/GHSA-r355-75hw-r8jf
reference_id GHSA-r355-75hw-r8jf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r355-75hw-r8jf
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p8
purl pkg:composer/magento/community-edition@2.4.7-p8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p8
1
url pkg:composer/magento/community-edition@2.4.8-p3
purl pkg:composer/magento/community-edition@2.4.8-p3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-p3
2
url pkg:composer/magento/community-edition@2.4.9-alpha3
purl pkg:composer/magento/community-edition@2.4.9-alpha3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha3
aliases CVE-2025-54265, GHSA-r355-75hw-r8jf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h2ju-dedu-fqad
49
url VCID-j9e4-4xta-6qc5
vulnerability_id VCID-j9e4-4xta-6qc5
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39414
reference_id
reference_type
scores
0
value 0.0032
scoring_system epss
scoring_elements 0.55553
published_at 2026-06-12T12:55:00Z
1
value 0.0032
scoring_system epss
scoring_elements 0.55568
published_at 2026-06-13T12:55:00Z
2
value 0.0032
scoring_system epss
scoring_elements 0.55433
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39414
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:11:42Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39414
reference_id CVE-2024-39414
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39414
4
reference_url https://github.com/advisories/GHSA-x6f9-hv9r-fgq4
reference_id GHSA-x6f9-hv9r-fgq4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x6f9-hv9r-fgq4
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39414, GHSA-x6f9-hv9r-fgq4
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j9e4-4xta-6qc5
50
url VCID-jkrp-j7st-27f3
vulnerability_id VCID-jkrp-j7st-27f3
summary Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead in arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction and attack complexity is high as it requires knowledge of tooling beyond just using the UI.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38250
reference_id
reference_type
scores
0
value 0.01841
scoring_system epss
scoring_elements 0.83442
published_at 2026-06-13T12:55:00Z
1
value 0.01841
scoring_system epss
scoring_elements 0.83373
published_at 2026-06-11T12:55:00Z
2
value 0.01841
scoring_system epss
scoring_elements 0.83433
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38250
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38250
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-38250
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-50.html
reference_id apsb23-50.html
reference_type
scores
0
value 8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
2
value 5.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-26T21:49:35Z/
url https://helpx.adobe.com/security/products/magento/apsb23-50.html
4
reference_url https://github.com/advisories/GHSA-h3g9-cwr6-hphx
reference_id GHSA-h3g9-cwr6-hphx
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h3g9-cwr6-hphx
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-beta2
purl pkg:composer/magento/community-edition@2.4.7-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-5edy-fp8q-97fp
12
vulnerability VCID-6d1u-exkw-hbfu
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-78hy-q8kh-kyh7
15
vulnerability VCID-7bmk-3ab2-9ba6
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-96hr-sbyj-27dw
20
vulnerability VCID-9gb1-p5qf-3kd2
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-bvfd-gs5b-dyg7
27
vulnerability VCID-ctrj-y3d6-a7dv
28
vulnerability VCID-cyy2-3rr3-jkc8
29
vulnerability VCID-d9zc-rh9p-4bde
30
vulnerability VCID-dktm-v3jw-f7de
31
vulnerability VCID-dsy7-gm7v-tqc8
32
vulnerability VCID-dytj-h56v-bke9
33
vulnerability VCID-e2t8-b5yy-zkhn
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-eusf-bc81-9uhv
36
vulnerability VCID-ferd-u8gt-akds
37
vulnerability VCID-fqkf-67fw-cyb8
38
vulnerability VCID-gac9-1nnp-67cc
39
vulnerability VCID-gakd-m2af-z7c2
40
vulnerability VCID-ggtj-fbzy-87fx
41
vulnerability VCID-gx3s-7cxk-pyfc
42
vulnerability VCID-gxbc-u5mr-f3c9
43
vulnerability VCID-gzga-qjaf-kugh
44
vulnerability VCID-h2ju-dedu-fqad
45
vulnerability VCID-j9e4-4xta-6qc5
46
vulnerability VCID-jnuu-9mt7-jyd5
47
vulnerability VCID-jyhf-huep-tya2
48
vulnerability VCID-kfct-k5af-n7fu
49
vulnerability VCID-kjc9-vrhf-hfav
50
vulnerability VCID-ktnj-j4xu-uufs
51
vulnerability VCID-kxjv-xm7r-hkhs
52
vulnerability VCID-mccb-abc5-9yfs
53
vulnerability VCID-ngx2-ewzf-xbd4
54
vulnerability VCID-ntst-nee5-63d3
55
vulnerability VCID-pb4n-m8cv-9bb7
56
vulnerability VCID-pcm6-819d-6uhm
57
vulnerability VCID-pfvk-8q6r-e7c5
58
vulnerability VCID-psnm-zaza-tuf9
59
vulnerability VCID-pu8a-r3v2-g7h9
60
vulnerability VCID-q68u-w433-tqb9
61
vulnerability VCID-qbx1-jqke-v7hf
62
vulnerability VCID-qh9p-8b9r-mufh
63
vulnerability VCID-qnpc-4r4b-3uhx
64
vulnerability VCID-rm7u-jwat-v7f1
65
vulnerability VCID-rw4d-b9yt-mbhz
66
vulnerability VCID-s45p-jru3-w3df
67
vulnerability VCID-s7t9-h2jx-9bgr
68
vulnerability VCID-t4gd-uv9g-ukh5
69
vulnerability VCID-twda-bvut-9bhp
70
vulnerability VCID-twdq-g82m-nqcp
71
vulnerability VCID-u9vz-axk1-fqfn
72
vulnerability VCID-vgz6-nvj3-xqft
73
vulnerability VCID-vwpg-z9en-6yej
74
vulnerability VCID-wfdz-b6c4-quhq
75
vulnerability VCID-wxkj-7zgv-x7bc
76
vulnerability VCID-xgh4-b9yn-dkh4
77
vulnerability VCID-xjd4-w9bn-mbex
78
vulnerability VCID-xmby-7b1y-v3cn
79
vulnerability VCID-xqc4-jf6e-abfg
80
vulnerability VCID-z97t-ffda-vfes
81
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta2
aliases CVE-2023-38250, GHSA-h3g9-cwr6-hphx
risk_score 3.6
exploitability 0.5
weighted_severity 7.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jkrp-j7st-27f3
51
url VCID-jnuu-9mt7-jyd5
vulnerability_id VCID-jnuu-9mt7-jyd5
summary Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution on the underlying filesystem. Exploitation of this issue does not require user interaction, but the attack complexity is high.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-20758
reference_id
reference_type
scores
0
value 0.02201
scoring_system epss
scoring_elements 0.84788
published_at 2026-06-11T12:55:00Z
1
value 0.02201
scoring_system epss
scoring_elements 0.84849
published_at 2026-06-13T12:55:00Z
2
value 0.02201
scoring_system epss
scoring_elements 0.84841
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-20758
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 9.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
1
value 8.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-18.html
reference_id apsb24-18.html
reference_type
scores
0
value 9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
1
value 9.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
2
value 8.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-04-11T04:01:06Z/
url https://helpx.adobe.com/security/products/magento/apsb24-18.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-20758
reference_id CVE-2024-20758
reference_type
scores
0
value 9.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
1
value 8.4
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-20758
4
reference_url https://github.com/advisories/GHSA-wh4m-6rh3-p4rq
reference_id GHSA-wh4m-6rh3-p4rq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wh4m-6rh3-p4rq
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7
purl pkg:composer/magento/community-edition@2.4.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-466x-mpt9-gbgy
13
vulnerability VCID-4b5p-wqtj-7kbe
14
vulnerability VCID-4nqq-nrne-17a2
15
vulnerability VCID-549e-3kmc-cyfw
16
vulnerability VCID-5edy-fp8q-97fp
17
vulnerability VCID-6d1u-exkw-hbfu
18
vulnerability VCID-6v47-xgpq-zkgf
19
vulnerability VCID-78hy-q8kh-kyh7
20
vulnerability VCID-7bmk-3ab2-9ba6
21
vulnerability VCID-7j68-gund-4qhp
22
vulnerability VCID-8365-zgh2-w3cc
23
vulnerability VCID-8gwb-c3ck-37f8
24
vulnerability VCID-9gb1-p5qf-3kd2
25
vulnerability VCID-9gbf-swtt-7bhz
26
vulnerability VCID-a6gj-zm14-aqhq
27
vulnerability VCID-ax9q-y1rb-33b2
28
vulnerability VCID-bfp1-cndf-d7d7
29
vulnerability VCID-bftg-2sea-57cv
30
vulnerability VCID-bvfd-gs5b-dyg7
31
vulnerability VCID-cyy2-3rr3-jkc8
32
vulnerability VCID-d9zc-rh9p-4bde
33
vulnerability VCID-dktm-v3jw-f7de
34
vulnerability VCID-dsy7-gm7v-tqc8
35
vulnerability VCID-dytj-h56v-bke9
36
vulnerability VCID-e2t8-b5yy-zkhn
37
vulnerability VCID-eban-ja9z-f7ep
38
vulnerability VCID-esjc-zzqy-nycf
39
vulnerability VCID-eusf-bc81-9uhv
40
vulnerability VCID-fb5x-afrq-87aj
41
vulnerability VCID-ferd-u8gt-akds
42
vulnerability VCID-fqkf-67fw-cyb8
43
vulnerability VCID-frhp-vgpt-g7am
44
vulnerability VCID-gac9-1nnp-67cc
45
vulnerability VCID-gakd-m2af-z7c2
46
vulnerability VCID-ggtj-fbzy-87fx
47
vulnerability VCID-gx3s-7cxk-pyfc
48
vulnerability VCID-gxbc-u5mr-f3c9
49
vulnerability VCID-gzga-qjaf-kugh
50
vulnerability VCID-h2ju-dedu-fqad
51
vulnerability VCID-j9e4-4xta-6qc5
52
vulnerability VCID-jc6r-vmnc-r3g9
53
vulnerability VCID-jeur-3jww-dqee
54
vulnerability VCID-jkrp-j7st-27f3
55
vulnerability VCID-jyhf-huep-tya2
56
vulnerability VCID-kf6b-mshs-23fa
57
vulnerability VCID-kfct-k5af-n7fu
58
vulnerability VCID-kjc9-vrhf-hfav
59
vulnerability VCID-ktnj-j4xu-uufs
60
vulnerability VCID-kxjv-xm7r-hkhs
61
vulnerability VCID-mccb-abc5-9yfs
62
vulnerability VCID-ngx2-ewzf-xbd4
63
vulnerability VCID-ntst-nee5-63d3
64
vulnerability VCID-pb4n-m8cv-9bb7
65
vulnerability VCID-pcm6-819d-6uhm
66
vulnerability VCID-pfvk-8q6r-e7c5
67
vulnerability VCID-psnm-zaza-tuf9
68
vulnerability VCID-pu8a-r3v2-g7h9
69
vulnerability VCID-q12a-kwpk-yufv
70
vulnerability VCID-q68u-w433-tqb9
71
vulnerability VCID-qbx1-jqke-v7hf
72
vulnerability VCID-qh9p-8b9r-mufh
73
vulnerability VCID-qnpc-4r4b-3uhx
74
vulnerability VCID-qr8w-qwb5-6uag
75
vulnerability VCID-rm7u-jwat-v7f1
76
vulnerability VCID-rw4d-b9yt-mbhz
77
vulnerability VCID-s45p-jru3-w3df
78
vulnerability VCID-s7t9-h2jx-9bgr
79
vulnerability VCID-t4gd-uv9g-ukh5
80
vulnerability VCID-twda-bvut-9bhp
81
vulnerability VCID-twdq-g82m-nqcp
82
vulnerability VCID-u52p-wrjp-quhk
83
vulnerability VCID-u9vz-axk1-fqfn
84
vulnerability VCID-vgz6-nvj3-xqft
85
vulnerability VCID-vwpg-z9en-6yej
86
vulnerability VCID-wfdz-b6c4-quhq
87
vulnerability VCID-wxkj-7zgv-x7bc
88
vulnerability VCID-xgh4-b9yn-dkh4
89
vulnerability VCID-xgk2-yecx-q3ff
90
vulnerability VCID-xjd4-w9bn-mbex
91
vulnerability VCID-xmby-7b1y-v3cn
92
vulnerability VCID-xqc4-jf6e-abfg
93
vulnerability VCID-z97t-ffda-vfes
94
vulnerability VCID-za87-d5x9-wuby
95
vulnerability VCID-zthr-mpwx-1fef
96
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7
aliases CVE-2024-20758, GHSA-wh4m-6rh3-p4rq
risk_score 4.0
exploitability 0.5
weighted_severity 8.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jnuu-9mt7-jyd5
52
url VCID-jyhf-huep-tya2
vulnerability_id VCID-jyhf-huep-tya2
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to perform brute force attacks and potentially gain unauthorized access to accounts. Exploitation of this issue does not require user interaction, but attack complexity is high.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39398
reference_id
reference_type
scores
0
value 0.00237
scoring_system epss
scoring_elements 0.47232
published_at 2026-06-13T12:55:00Z
1
value 0.00237
scoring_system epss
scoring_elements 0.47077
published_at 2026-06-11T12:55:00Z
2
value 0.00237
scoring_system epss
scoring_elements 0.47218
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39398
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:10:17Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39398
reference_id CVE-2024-39398
reference_type
scores
0
value 7.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39398
4
reference_url https://github.com/advisories/GHSA-q628-54wg-4r5q
reference_id GHSA-q628-54wg-4r5q
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q628-54wg-4r5q
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39398, GHSA-q628-54wg-4r5q
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jyhf-huep-tya2
53
url VCID-kfct-k5af-n7fu
vulnerability_id VCID-kfct-k5af-n7fu
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could be exploited to execute arbitrary code. If an admin attacker can trick a user into clicking a specially crafted link or submitting a form, malicious scripts may be executed within the context of the victim's browser and have high impact on confidentiality and integrity. Exploitation of this issue requires user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45116
reference_id
reference_type
scores
0
value 0.01833
scoring_system epss
scoring_elements 0.83391
published_at 2026-06-12T12:55:00Z
1
value 0.01833
scoring_system epss
scoring_elements 0.834
published_at 2026-06-13T12:55:00Z
2
value 0.01833
scoring_system epss
scoring_elements 0.8333
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45116
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value 6.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value 6.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-10T13:56:29Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45116
reference_id CVE-2024-45116
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value 6.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45116
4
reference_url https://github.com/advisories/GHSA-873m-72g6-853g
reference_id GHSA-873m-72g6-853g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-873m-72g6-853g
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45116, GHSA-873m-72g6-853g
risk_score 3.6
exploitability 0.5
weighted_severity 7.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kfct-k5af-n7fu
54
url VCID-kjc9-vrhf-hfav
vulnerability_id VCID-kjc9-vrhf-hfav
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24427
reference_id
reference_type
scores
0
value 0.00188
scoring_system epss
scoring_elements 0.40659
published_at 2026-06-12T12:55:00Z
1
value 0.00188
scoring_system epss
scoring_elements 0.40682
published_at 2026-06-13T12:55:00Z
2
value 0.00188
scoring_system epss
scoring_elements 0.40491
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24427
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24427
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24427
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-11T18:49:04Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-v3hq-g424-5mgg
reference_id GHSA-v3hq-g424-5mgg
reference_type
scores
url https://github.com/advisories/GHSA-v3hq-g424-5mgg
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24427, GHSA-v3hq-g424-5mgg
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kjc9-vrhf-hfav
55
url VCID-ktnj-j4xu-uufs
vulnerability_id VCID-ktnj-j4xu-uufs
summary Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in privilege escalation. A high-privileged attacker could trick a victim into executing unintended actions on a web application where the victim is authenticated, potentially allowing unauthorized access or modification of sensitive data. Exploitation of this issue requires user interaction in that a victim must visit a malicious website or click on a crafted link. Scope is changed.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-49555
reference_id
reference_type
scores
0
value 0.00368
scoring_system epss
scoring_elements 0.59261
published_at 2026-06-12T12:55:00Z
1
value 0.00368
scoring_system epss
scoring_elements 0.59273
published_at 2026-06-13T12:55:00Z
2
value 0.00368
scoring_system epss
scoring_elements 0.59149
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-49555
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-49555
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-49555
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-71.html
reference_id apsb25-71.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-08-13T15:04:10Z/
url https://helpx.adobe.com/security/products/magento/apsb25-71.html
4
reference_url https://github.com/advisories/GHSA-5777-jj7p-mpqw
reference_id GHSA-5777-jj7p-mpqw
reference_type
scores
url https://github.com/advisories/GHSA-5777-jj7p-mpqw
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p7
purl pkg:composer/magento/community-edition@2.4.7-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p7
1
url pkg:composer/magento/community-edition@2.4.8-p2
purl pkg:composer/magento/community-edition@2.4.8-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-p2
2
url pkg:composer/magento/community-edition@2.4.9-alpha2
purl pkg:composer/magento/community-edition@2.4.9-alpha2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha2
aliases CVE-2025-49555, GHSA-5777-jj7p-mpqw
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ktnj-j4xu-uufs
56
url VCID-kxjv-xm7r-hkhs
vulnerability_id VCID-kxjv-xm7r-hkhs
summary Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-27191
reference_id
reference_type
scores
0
value 0.00266
scoring_system epss
scoring_elements 0.50515
published_at 2026-06-12T12:55:00Z
1
value 0.00266
scoring_system epss
scoring_elements 0.50533
published_at 2026-06-13T12:55:00Z
2
value 0.00266
scoring_system epss
scoring_elements 0.50382
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-27191
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-27191
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-27191
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-26.html
reference_id apsb25-26.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-08T20:53:08Z/
url https://helpx.adobe.com/security/products/magento/apsb25-26.html
4
reference_url https://github.com/advisories/GHSA-vhcq-4xrm-2cr2
reference_id GHSA-vhcq-4xrm-2cr2
reference_type
scores
url https://github.com/advisories/GHSA-vhcq-4xrm-2cr2
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p5
purl pkg:composer/magento/community-edition@2.4.7-p5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gakd-m2af-z7c2
8
vulnerability VCID-gx3s-7cxk-pyfc
9
vulnerability VCID-h2ju-dedu-fqad
10
vulnerability VCID-ktnj-j4xu-uufs
11
vulnerability VCID-pcm6-819d-6uhm
12
vulnerability VCID-twdq-g82m-nqcp
13
vulnerability VCID-xgh4-b9yn-dkh4
14
vulnerability VCID-xjd4-w9bn-mbex
15
vulnerability VCID-xqc4-jf6e-abfg
16
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p5
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-27191, GHSA-vhcq-4xrm-2cr2
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kxjv-xm7r-hkhs
57
url VCID-mccb-abc5-9yfs
vulnerability_id VCID-mccb-abc5-9yfs
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have high impact on integrity. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45118
reference_id
reference_type
scores
0
value 0.00086
scoring_system epss
scoring_elements 0.24849
published_at 2026-06-11T12:55:00Z
1
value 0.00086
scoring_system epss
scoring_elements 0.25066
published_at 2026-06-13T12:55:00Z
2
value 0.00086
scoring_system epss
scoring_elements 0.25049
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45118
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T13:45:03Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45118
reference_id CVE-2024-45118
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45118
4
reference_url https://github.com/advisories/GHSA-cg52-68fv-94qq
reference_id GHSA-cg52-68fv-94qq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cg52-68fv-94qq
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45118, GHSA-cg52-68fv-94qq
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mccb-abc5-9yfs
58
url VCID-ngx2-ewzf-xbd4
vulnerability_id VCID-ngx2-ewzf-xbd4
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An admin attacker could exploit this vulnerability to read files from the system outside of the intended directories via PHP filter chain and also can have a low-availability impact on the service. Exploitation of this issue does not require user interaction and scope is changed.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45117
reference_id
reference_type
scores
0
value 0.0026
scoring_system epss
scoring_elements 0.49675
published_at 2026-06-11T12:55:00Z
1
value 0.0026
scoring_system epss
scoring_elements 0.49831
published_at 2026-06-13T12:55:00Z
2
value 0.0026
scoring_system epss
scoring_elements 0.49812
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45117
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
1
value 6.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
1
value 6.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T14:07:29Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45117
reference_id CVE-2024-45117
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
1
value 6.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45117
4
reference_url https://github.com/advisories/GHSA-3fr3-gcqh-3m2g
reference_id GHSA-3fr3-gcqh-3m2g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3fr3-gcqh-3m2g
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45117, GHSA-3fr3-gcqh-3m2g
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ngx2-ewzf-xbd4
59
url VCID-ntst-nee5-63d3
vulnerability_id VCID-ntst-nee5-63d3
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24410
reference_id
reference_type
scores
0
value 0.01784
scoring_system epss
scoring_elements 0.83198
published_at 2026-06-12T12:55:00Z
1
value 0.01784
scoring_system epss
scoring_elements 0.83207
published_at 2026-06-13T12:55:00Z
2
value 0.01784
scoring_system epss
scoring_elements 0.83137
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24410
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24410
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24410
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-14T04:55:38Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-gjxp-46rq-wg4q
reference_id GHSA-gjxp-46rq-wg4q
reference_type
scores
url https://github.com/advisories/GHSA-gjxp-46rq-wg4q
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24410, GHSA-gjxp-46rq-wg4q
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ntst-nee5-63d3
60
url VCID-pb4n-m8cv-9bb7
vulnerability_id VCID-pb4n-m8cv-9bb7
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could exploit this vulnerability to have a low impact on integrity. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45125
reference_id
reference_type
scores
0
value 0.00068
scoring_system epss
scoring_elements 0.21432
published_at 2026-06-13T12:55:00Z
1
value 0.00068
scoring_system epss
scoring_elements 0.21237
published_at 2026-06-11T12:55:00Z
2
value 0.00068
scoring_system epss
scoring_elements 0.21419
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45125
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T14:06:28Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45125
reference_id CVE-2024-45125
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45125
4
reference_url https://github.com/advisories/GHSA-xg36-8c2v-jpxh
reference_id GHSA-xg36-8c2v-jpxh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xg36-8c2v-jpxh
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45125, GHSA-xg36-8c2v-jpxh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pb4n-m8cv-9bb7
61
url VCID-pcm6-819d-6uhm
vulnerability_id VCID-pcm6-819d-6uhm
summary Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting (XSS) Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field. Scope is changed.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-54264
reference_id
reference_type
scores
0
value 0.00214
scoring_system epss
scoring_elements 0.44191
published_at 2026-06-12T12:55:00Z
1
value 0.00214
scoring_system epss
scoring_elements 0.4421
published_at 2026-06-13T12:55:00Z
2
value 0.00214
scoring_system epss
scoring_elements 0.44038
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-54264
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb25-94.html
reference_id apsb25-94.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-10-21T03:55:28Z/
url https://helpx.adobe.com/security/products/magento/apsb25-94.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-54264
reference_id CVE-2025-54264
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-54264
4
reference_url https://github.com/advisories/GHSA-2768-5wmv-cfff
reference_id GHSA-2768-5wmv-cfff
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2768-5wmv-cfff
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p8
purl pkg:composer/magento/community-edition@2.4.7-p8
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p8
1
url pkg:composer/magento/community-edition@2.4.8-p3
purl pkg:composer/magento/community-edition@2.4.8-p3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-p3
2
url pkg:composer/magento/community-edition@2.4.9-alpha3
purl pkg:composer/magento/community-edition@2.4.9-alpha3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha3
aliases CVE-2025-54264, GHSA-2768-5wmv-cfff
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pcm6-819d-6uhm
62
url VCID-pfvk-8q6r-e7c5
vulnerability_id VCID-pfvk-8q6r-e7c5
summary Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain elevated privileges. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24437
reference_id
reference_type
scores
0
value 0.00152
scoring_system epss
scoring_elements 0.35884
published_at 2026-06-12T12:55:00Z
1
value 0.00152
scoring_system epss
scoring_elements 0.35907
published_at 2026-06-13T12:55:00Z
2
value 0.00152
scoring_system epss
scoring_elements 0.35704
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24437
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24437
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24437
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-11T18:48:35Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-469f-wf4f-3jjv
reference_id GHSA-469f-wf4f-3jjv
reference_type
scores
url https://github.com/advisories/GHSA-469f-wf4f-3jjv
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24437, GHSA-469f-wf4f-3jjv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pfvk-8q6r-e7c5
63
url VCID-psnm-zaza-tuf9
vulnerability_id VCID-psnm-zaza-tuf9
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24414
reference_id
reference_type
scores
0
value 0.01321
scoring_system epss
scoring_elements 0.80361
published_at 2026-06-12T12:55:00Z
1
value 0.01321
scoring_system epss
scoring_elements 0.80377
published_at 2026-06-13T12:55:00Z
2
value 0.01321
scoring_system epss
scoring_elements 0.803
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24414
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24414
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24414
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-14T04:55:45Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-fhw6-3mj5-w9gv
reference_id GHSA-fhw6-3mj5-w9gv
reference_type
scores
url https://github.com/advisories/GHSA-fhw6-3mj5-w9gv
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24414, GHSA-fhw6-3mj5-w9gv
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-psnm-zaza-tuf9
64
url VCID-pu8a-r3v2-g7h9
vulnerability_id VCID-pu8a-r3v2-g7h9
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24416
reference_id
reference_type
scores
0
value 0.01321
scoring_system epss
scoring_elements 0.80361
published_at 2026-06-12T12:55:00Z
1
value 0.01321
scoring_system epss
scoring_elements 0.80377
published_at 2026-06-13T12:55:00Z
2
value 0.01321
scoring_system epss
scoring_elements 0.803
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24416
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24416
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24416
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-14T04:55:48Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-rjjw-g6hw-7pc9
reference_id GHSA-rjjw-g6hw-7pc9
reference_type
scores
url https://github.com/advisories/GHSA-rjjw-g6hw-7pc9
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24416, GHSA-rjjw-g6hw-7pc9
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pu8a-r3v2-g7h9
65
url VCID-q12a-kwpk-yufv
vulnerability_id VCID-q12a-kwpk-yufv
summary Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction, scope is changed due to the fact that an attacker can enforce file read outside the application's path boundary.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-26366
reference_id
reference_type
scores
0
value 0.00355
scoring_system epss
scoring_elements 0.58358
published_at 2026-06-13T12:55:00Z
1
value 0.00355
scoring_system epss
scoring_elements 0.5823
published_at 2026-06-11T12:55:00Z
2
value 0.00355
scoring_system epss
scoring_elements 0.58342
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-26366
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
1
value 5.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-26366
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
1
value 5.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-26366
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-50.html
reference_id apsb23-50.html
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
1
value 5.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T21:49:13Z/
url https://helpx.adobe.com/security/products/magento/apsb23-50.html
4
reference_url https://github.com/advisories/GHSA-8jxc-5f94-22vh
reference_id GHSA-8jxc-5f94-22vh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8jxc-5f94-22vh
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-beta2
purl pkg:composer/magento/community-edition@2.4.7-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-5edy-fp8q-97fp
12
vulnerability VCID-6d1u-exkw-hbfu
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-78hy-q8kh-kyh7
15
vulnerability VCID-7bmk-3ab2-9ba6
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-96hr-sbyj-27dw
20
vulnerability VCID-9gb1-p5qf-3kd2
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-bvfd-gs5b-dyg7
27
vulnerability VCID-ctrj-y3d6-a7dv
28
vulnerability VCID-cyy2-3rr3-jkc8
29
vulnerability VCID-d9zc-rh9p-4bde
30
vulnerability VCID-dktm-v3jw-f7de
31
vulnerability VCID-dsy7-gm7v-tqc8
32
vulnerability VCID-dytj-h56v-bke9
33
vulnerability VCID-e2t8-b5yy-zkhn
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-eusf-bc81-9uhv
36
vulnerability VCID-ferd-u8gt-akds
37
vulnerability VCID-fqkf-67fw-cyb8
38
vulnerability VCID-gac9-1nnp-67cc
39
vulnerability VCID-gakd-m2af-z7c2
40
vulnerability VCID-ggtj-fbzy-87fx
41
vulnerability VCID-gx3s-7cxk-pyfc
42
vulnerability VCID-gxbc-u5mr-f3c9
43
vulnerability VCID-gzga-qjaf-kugh
44
vulnerability VCID-h2ju-dedu-fqad
45
vulnerability VCID-j9e4-4xta-6qc5
46
vulnerability VCID-jnuu-9mt7-jyd5
47
vulnerability VCID-jyhf-huep-tya2
48
vulnerability VCID-kfct-k5af-n7fu
49
vulnerability VCID-kjc9-vrhf-hfav
50
vulnerability VCID-ktnj-j4xu-uufs
51
vulnerability VCID-kxjv-xm7r-hkhs
52
vulnerability VCID-mccb-abc5-9yfs
53
vulnerability VCID-ngx2-ewzf-xbd4
54
vulnerability VCID-ntst-nee5-63d3
55
vulnerability VCID-pb4n-m8cv-9bb7
56
vulnerability VCID-pcm6-819d-6uhm
57
vulnerability VCID-pfvk-8q6r-e7c5
58
vulnerability VCID-psnm-zaza-tuf9
59
vulnerability VCID-pu8a-r3v2-g7h9
60
vulnerability VCID-q68u-w433-tqb9
61
vulnerability VCID-qbx1-jqke-v7hf
62
vulnerability VCID-qh9p-8b9r-mufh
63
vulnerability VCID-qnpc-4r4b-3uhx
64
vulnerability VCID-rm7u-jwat-v7f1
65
vulnerability VCID-rw4d-b9yt-mbhz
66
vulnerability VCID-s45p-jru3-w3df
67
vulnerability VCID-s7t9-h2jx-9bgr
68
vulnerability VCID-t4gd-uv9g-ukh5
69
vulnerability VCID-twda-bvut-9bhp
70
vulnerability VCID-twdq-g82m-nqcp
71
vulnerability VCID-u9vz-axk1-fqfn
72
vulnerability VCID-vgz6-nvj3-xqft
73
vulnerability VCID-vwpg-z9en-6yej
74
vulnerability VCID-wfdz-b6c4-quhq
75
vulnerability VCID-wxkj-7zgv-x7bc
76
vulnerability VCID-xgh4-b9yn-dkh4
77
vulnerability VCID-xjd4-w9bn-mbex
78
vulnerability VCID-xmby-7b1y-v3cn
79
vulnerability VCID-xqc4-jf6e-abfg
80
vulnerability VCID-z97t-ffda-vfes
81
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta2
aliases CVE-2023-26366, GHSA-8jxc-5f94-22vh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q12a-kwpk-yufv
66
url VCID-q68u-w433-tqb9
vulnerability_id VCID-q68u-w433-tqb9
summary Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently Protected Credentials vulnerability that could lead to a security feature bypass. A high privileged attacker could exploit this vulnerability to gain unauthorized access to protected resources by obtaining sensitive credential information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-27192
reference_id
reference_type
scores
0
value 0.00105
scoring_system epss
scoring_elements 0.28266
published_at 2026-06-12T12:55:00Z
1
value 0.00105
scoring_system epss
scoring_elements 0.2829
published_at 2026-06-13T12:55:00Z
2
value 0.00105
scoring_system epss
scoring_elements 0.28067
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-27192
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-27192
reference_id
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-27192
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-26.html
reference_id apsb25-26.html
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-08T20:53:23Z/
url https://helpx.adobe.com/security/products/magento/apsb25-26.html
4
reference_url https://github.com/advisories/GHSA-2r94-wm5v-4prx
reference_id GHSA-2r94-wm5v-4prx
reference_type
scores
url https://github.com/advisories/GHSA-2r94-wm5v-4prx
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p5
purl pkg:composer/magento/community-edition@2.4.7-p5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gakd-m2af-z7c2
8
vulnerability VCID-gx3s-7cxk-pyfc
9
vulnerability VCID-h2ju-dedu-fqad
10
vulnerability VCID-ktnj-j4xu-uufs
11
vulnerability VCID-pcm6-819d-6uhm
12
vulnerability VCID-twdq-g82m-nqcp
13
vulnerability VCID-xgh4-b9yn-dkh4
14
vulnerability VCID-xjd4-w9bn-mbex
15
vulnerability VCID-xqc4-jf6e-abfg
16
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p5
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-27192, GHSA-2r94-wm5v-4prx
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q68u-w433-tqb9
67
url VCID-qbx1-jqke-v7hf
vulnerability_id VCID-qbx1-jqke-v7hf
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an admin attacker. Exploitation of this issue requires user interaction and scope is changed.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39402
reference_id
reference_type
scores
0
value 0.0264
scoring_system epss
scoring_elements 0.86105
published_at 2026-06-13T12:55:00Z
1
value 0.0264
scoring_system epss
scoring_elements 0.86044
published_at 2026-06-11T12:55:00Z
2
value 0.0264
scoring_system epss
scoring_elements 0.86093
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39402
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:12:09Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39402
reference_id CVE-2024-39402
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39402
4
reference_url https://github.com/advisories/GHSA-2ff6-837j-hg5x
reference_id GHSA-2ff6-837j-hg5x
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2ff6-837j-hg5x
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39402, GHSA-2ff6-837j-hg5x
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qbx1-jqke-v7hf
68
url VCID-qh9p-8b9r-mufh
vulnerability_id VCID-qh9p-8b9r-mufh
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24412
reference_id
reference_type
scores
0
value 0.01321
scoring_system epss
scoring_elements 0.80361
published_at 2026-06-12T12:55:00Z
1
value 0.01321
scoring_system epss
scoring_elements 0.80377
published_at 2026-06-13T12:55:00Z
2
value 0.01321
scoring_system epss
scoring_elements 0.803
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24412
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24412
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24412
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-14T04:55:41Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-m4rg-mpp2-97px
reference_id GHSA-m4rg-mpp2-97px
reference_type
scores
url https://github.com/advisories/GHSA-m4rg-mpp2-97px
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24412, GHSA-m4rg-mpp2-97px
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qh9p-8b9r-mufh
69
url VCID-qnpc-4r4b-3uhx
vulnerability_id VCID-qnpc-4r4b-3uhx
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39417
reference_id
reference_type
scores
0
value 0.00306
scoring_system epss
scoring_elements 0.54386
published_at 2026-06-12T12:55:00Z
1
value 0.00306
scoring_system epss
scoring_elements 0.54403
published_at 2026-06-13T12:55:00Z
2
value 0.00306
scoring_system epss
scoring_elements 0.54261
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39417
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:09:31Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39417
reference_id CVE-2024-39417
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39417
4
reference_url https://github.com/advisories/GHSA-4xmj-f664-hv98
reference_id GHSA-4xmj-f664-hv98
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4xmj-f664-hv98
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39417, GHSA-4xmj-f664-hv98
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qnpc-4r4b-3uhx
70
url VCID-qr8w-qwb5-6uag
vulnerability_id VCID-qr8w-qwb5-6uag
summary Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-26367
reference_id
reference_type
scores
0
value 0.00363
scoring_system epss
scoring_elements 0.58915
published_at 2026-06-13T12:55:00Z
1
value 0.00363
scoring_system epss
scoring_elements 0.58788
published_at 2026-06-11T12:55:00Z
2
value 0.00363
scoring_system epss
scoring_elements 0.589
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-26367
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-26367
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-26367
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-50.html
reference_id apsb23-50.html
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T21:49:12Z/
url https://helpx.adobe.com/security/products/magento/apsb23-50.html
4
reference_url https://github.com/advisories/GHSA-9mx6-4gg4-85xj
reference_id GHSA-9mx6-4gg4-85xj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9mx6-4gg4-85xj
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-beta2
purl pkg:composer/magento/community-edition@2.4.7-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-5edy-fp8q-97fp
12
vulnerability VCID-6d1u-exkw-hbfu
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-78hy-q8kh-kyh7
15
vulnerability VCID-7bmk-3ab2-9ba6
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-96hr-sbyj-27dw
20
vulnerability VCID-9gb1-p5qf-3kd2
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-bvfd-gs5b-dyg7
27
vulnerability VCID-ctrj-y3d6-a7dv
28
vulnerability VCID-cyy2-3rr3-jkc8
29
vulnerability VCID-d9zc-rh9p-4bde
30
vulnerability VCID-dktm-v3jw-f7de
31
vulnerability VCID-dsy7-gm7v-tqc8
32
vulnerability VCID-dytj-h56v-bke9
33
vulnerability VCID-e2t8-b5yy-zkhn
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-eusf-bc81-9uhv
36
vulnerability VCID-ferd-u8gt-akds
37
vulnerability VCID-fqkf-67fw-cyb8
38
vulnerability VCID-gac9-1nnp-67cc
39
vulnerability VCID-gakd-m2af-z7c2
40
vulnerability VCID-ggtj-fbzy-87fx
41
vulnerability VCID-gx3s-7cxk-pyfc
42
vulnerability VCID-gxbc-u5mr-f3c9
43
vulnerability VCID-gzga-qjaf-kugh
44
vulnerability VCID-h2ju-dedu-fqad
45
vulnerability VCID-j9e4-4xta-6qc5
46
vulnerability VCID-jnuu-9mt7-jyd5
47
vulnerability VCID-jyhf-huep-tya2
48
vulnerability VCID-kfct-k5af-n7fu
49
vulnerability VCID-kjc9-vrhf-hfav
50
vulnerability VCID-ktnj-j4xu-uufs
51
vulnerability VCID-kxjv-xm7r-hkhs
52
vulnerability VCID-mccb-abc5-9yfs
53
vulnerability VCID-ngx2-ewzf-xbd4
54
vulnerability VCID-ntst-nee5-63d3
55
vulnerability VCID-pb4n-m8cv-9bb7
56
vulnerability VCID-pcm6-819d-6uhm
57
vulnerability VCID-pfvk-8q6r-e7c5
58
vulnerability VCID-psnm-zaza-tuf9
59
vulnerability VCID-pu8a-r3v2-g7h9
60
vulnerability VCID-q68u-w433-tqb9
61
vulnerability VCID-qbx1-jqke-v7hf
62
vulnerability VCID-qh9p-8b9r-mufh
63
vulnerability VCID-qnpc-4r4b-3uhx
64
vulnerability VCID-rm7u-jwat-v7f1
65
vulnerability VCID-rw4d-b9yt-mbhz
66
vulnerability VCID-s45p-jru3-w3df
67
vulnerability VCID-s7t9-h2jx-9bgr
68
vulnerability VCID-t4gd-uv9g-ukh5
69
vulnerability VCID-twda-bvut-9bhp
70
vulnerability VCID-twdq-g82m-nqcp
71
vulnerability VCID-u9vz-axk1-fqfn
72
vulnerability VCID-vgz6-nvj3-xqft
73
vulnerability VCID-vwpg-z9en-6yej
74
vulnerability VCID-wfdz-b6c4-quhq
75
vulnerability VCID-wxkj-7zgv-x7bc
76
vulnerability VCID-xgh4-b9yn-dkh4
77
vulnerability VCID-xjd4-w9bn-mbex
78
vulnerability VCID-xmby-7b1y-v3cn
79
vulnerability VCID-xqc4-jf6e-abfg
80
vulnerability VCID-z97t-ffda-vfes
81
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta2
aliases CVE-2023-26367, GHSA-9mx6-4gg4-85xj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qr8w-qwb5-6uag
71
url VCID-rm7u-jwat-v7f1
vulnerability_id VCID-rm7u-jwat-v7f1
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access, leading to both a High impact to confidentiality and Low impact to integrity. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24409
reference_id
reference_type
scores
0
value 0.00146
scoring_system epss
scoring_elements 0.34983
published_at 2026-06-12T12:55:00Z
1
value 0.00146
scoring_system epss
scoring_elements 0.35006
published_at 2026-06-13T12:55:00Z
2
value 0.00146
scoring_system epss
scoring_elements 0.34804
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24409
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24409
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24409
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-11T19:11:11Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-vw47-79jv-3598
reference_id GHSA-vw47-79jv-3598
reference_type
scores
url https://github.com/advisories/GHSA-vw47-79jv-3598
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24409, GHSA-vw47-79jv-3598
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rm7u-jwat-v7f1
72
url VCID-rw4d-b9yt-mbhz
vulnerability_id VCID-rw4d-b9yt-mbhz
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an admin attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45127
reference_id
reference_type
scores
0
value 0.01887
scoring_system epss
scoring_elements 0.8358
published_at 2026-06-11T12:55:00Z
1
value 0.01887
scoring_system epss
scoring_elements 0.83649
published_at 2026-06-13T12:55:00Z
2
value 0.01887
scoring_system epss
scoring_elements 0.83639
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45127
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T13:55:55Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45127
reference_id CVE-2024-45127
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.8
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45127
4
reference_url https://github.com/advisories/GHSA-c89g-gq5r-2xw2
reference_id GHSA-c89g-gq5r-2xw2
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c89g-gq5r-2xw2
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45127, GHSA-c89g-gq5r-2xw2
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rw4d-b9yt-mbhz
73
url VCID-s45p-jru3-w3df
vulnerability_id VCID-s45p-jru3-w3df
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in further attacks. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45133
reference_id
reference_type
scores
0
value 0.00108
scoring_system epss
scoring_elements 0.28638
published_at 2026-06-11T12:55:00Z
1
value 0.00108
scoring_system epss
scoring_elements 0.28863
published_at 2026-06-13T12:55:00Z
2
value 0.00108
scoring_system epss
scoring_elements 0.28838
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45133
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T13:54:05Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45133
reference_id CVE-2024-45133
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45133
4
reference_url https://github.com/advisories/GHSA-j3mh-wx5f-2vhg
reference_id GHSA-j3mh-wx5f-2vhg
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j3mh-wx5f-2vhg
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45133, GHSA-j3mh-wx5f-2vhg
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s45p-jru3-w3df
74
url VCID-s7t9-h2jx-9bgr
vulnerability_id VCID-s7t9-h2jx-9bgr
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39416
reference_id
reference_type
scores
0
value 0.0032
scoring_system epss
scoring_elements 0.55553
published_at 2026-06-12T12:55:00Z
1
value 0.0032
scoring_system epss
scoring_elements 0.55568
published_at 2026-06-13T12:55:00Z
2
value 0.0032
scoring_system epss
scoring_elements 0.55433
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39416
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:11:27Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39416
reference_id CVE-2024-39416
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39416
4
reference_url https://github.com/advisories/GHSA-4xgg-rw35-7mv5
reference_id GHSA-4xgg-rw35-7mv5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4xgg-rw35-7mv5
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39416, GHSA-4xgg-rw35-7mv5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s7t9-h2jx-9bgr
75
url VCID-t4gd-uv9g-ukh5
vulnerability_id VCID-t4gd-uv9g-ukh5
summary Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Business Logic Error vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to circumvent intended security mechanisms by manipulating the logic of the application's operations causing limited data modification. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24425
reference_id
reference_type
scores
0
value 0.00245
scoring_system epss
scoring_elements 0.48182
published_at 2026-06-12T12:55:00Z
1
value 0.00245
scoring_system epss
scoring_elements 0.48199
published_at 2026-06-13T12:55:00Z
2
value 0.00245
scoring_system epss
scoring_elements 0.48044
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24425
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24425
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24425
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-11T18:51:39Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-6ff8-jrfg-43hh
reference_id GHSA-6ff8-jrfg-43hh
reference_type
scores
url https://github.com/advisories/GHSA-6ff8-jrfg-43hh
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24425, GHSA-6ff8-jrfg-43hh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t4gd-uv9g-ukh5
76
url VCID-twda-bvut-9bhp
vulnerability_id VCID-twda-bvut-9bhp
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in further attacks. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45134
reference_id
reference_type
scores
0
value 0.00121
scoring_system epss
scoring_elements 0.30857
published_at 2026-06-13T12:55:00Z
1
value 0.00121
scoring_system epss
scoring_elements 0.30641
published_at 2026-06-11T12:55:00Z
2
value 0.00121
scoring_system epss
scoring_elements 0.3084
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45134
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T14:05:23Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45134
reference_id CVE-2024-45134
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value 5.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45134
4
reference_url https://github.com/advisories/GHSA-4f89-5cwm-rm5g
reference_id GHSA-4f89-5cwm-rm5g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4f89-5cwm-rm5g
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45134, GHSA-4f89-5cwm-rm5g
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-twda-bvut-9bhp
77
url VCID-twdq-g82m-nqcp
vulnerability_id VCID-twdq-g82m-nqcp
summary Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input, causing the application to crash or become unresponsive. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-49554
reference_id
reference_type
scores
0
value 0.01005
scoring_system epss
scoring_elements 0.77553
published_at 2026-06-13T12:55:00Z
1
value 0.01005
scoring_system epss
scoring_elements 0.77469
published_at 2026-06-11T12:55:00Z
2
value 0.01005
scoring_system epss
scoring_elements 0.77538
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-49554
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-49554
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-49554
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-71.html
reference_id apsb25-71.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-13T14:18:27Z/
url https://helpx.adobe.com/security/products/magento/apsb25-71.html
4
reference_url https://github.com/advisories/GHSA-xgfm-992v-h2hr
reference_id GHSA-xgfm-992v-h2hr
reference_type
scores
url https://github.com/advisories/GHSA-xgfm-992v-h2hr
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p7
purl pkg:composer/magento/community-edition@2.4.7-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p7
1
url pkg:composer/magento/community-edition@2.4.8-p2
purl pkg:composer/magento/community-edition@2.4.8-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-p2
2
url pkg:composer/magento/community-edition@2.4.9-alpha2
purl pkg:composer/magento/community-edition@2.4.9-alpha2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-eusf-bc81-9uhv
4
vulnerability VCID-h2ju-dedu-fqad
5
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha2
aliases CVE-2025-49554, GHSA-xgfm-992v-h2hr
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-twdq-g82m-nqcp
78
url VCID-u9vz-axk1-fqfn
vulnerability_id VCID-u9vz-axk1-fqfn
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24415
reference_id
reference_type
scores
0
value 0.01321
scoring_system epss
scoring_elements 0.80361
published_at 2026-06-12T12:55:00Z
1
value 0.01321
scoring_system epss
scoring_elements 0.80377
published_at 2026-06-13T12:55:00Z
2
value 0.01321
scoring_system epss
scoring_elements 0.803
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24415
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24415
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24415
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-14T04:55:47Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-gc27-rvvm-q77r
reference_id GHSA-gc27-rvvm-q77r
reference_type
scores
url https://github.com/advisories/GHSA-gc27-rvvm-q77r
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24415, GHSA-gc27-rvvm-q77r
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u9vz-axk1-fqfn
79
url VCID-vgz6-nvj3-xqft
vulnerability_id VCID-vgz6-nvj3-xqft
summary Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality and integrity. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-45131
reference_id
reference_type
scores
0
value 0.00132
scoring_system epss
scoring_elements 0.32384
published_at 2026-06-11T12:55:00Z
1
value 0.00132
scoring_system epss
scoring_elements 0.32585
published_at 2026-06-13T12:55:00Z
2
value 0.00132
scoring_system epss
scoring_elements 0.32565
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-45131
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-73.html
reference_id apsb24-73.html
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-10T14:02:38Z/
url https://helpx.adobe.com/security/products/magento/apsb24-73.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-45131
reference_id CVE-2024-45131
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-45131
4
reference_url https://github.com/advisories/GHSA-xc5p-773w-m3pm
reference_id GHSA-xc5p-773w-m3pm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xc5p-773w-m3pm
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p3
purl pkg:composer/magento/community-edition@2.4.7-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-53sd-5nuj-e7d9
5
vulnerability VCID-5edy-fp8q-97fp
6
vulnerability VCID-6d1u-exkw-hbfu
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-9gbf-swtt-7bhz
10
vulnerability VCID-bvfd-gs5b-dyg7
11
vulnerability VCID-ctrj-y3d6-a7dv
12
vulnerability VCID-cyy2-3rr3-jkc8
13
vulnerability VCID-d9zc-rh9p-4bde
14
vulnerability VCID-dytj-h56v-bke9
15
vulnerability VCID-esjc-zzqy-nycf
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-ferd-u8gt-akds
18
vulnerability VCID-fqkf-67fw-cyb8
19
vulnerability VCID-gac9-1nnp-67cc
20
vulnerability VCID-gakd-m2af-z7c2
21
vulnerability VCID-gx3s-7cxk-pyfc
22
vulnerability VCID-gzga-qjaf-kugh
23
vulnerability VCID-h2ju-dedu-fqad
24
vulnerability VCID-jc6r-vmnc-r3g9
25
vulnerability VCID-kjc9-vrhf-hfav
26
vulnerability VCID-ktnj-j4xu-uufs
27
vulnerability VCID-kxjv-xm7r-hkhs
28
vulnerability VCID-ntst-nee5-63d3
29
vulnerability VCID-pcm6-819d-6uhm
30
vulnerability VCID-pfvk-8q6r-e7c5
31
vulnerability VCID-psnm-zaza-tuf9
32
vulnerability VCID-pu8a-r3v2-g7h9
33
vulnerability VCID-q68u-w433-tqb9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-t4gd-uv9g-ukh5
37
vulnerability VCID-twdq-g82m-nqcp
38
vulnerability VCID-u9vz-axk1-fqfn
39
vulnerability VCID-wxkj-7zgv-x7bc
40
vulnerability VCID-xgh4-b9yn-dkh4
41
vulnerability VCID-xjd4-w9bn-mbex
42
vulnerability VCID-xqc4-jf6e-abfg
43
vulnerability VCID-z97t-ffda-vfes
44
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p3
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
aliases CVE-2024-45131, GHSA-xc5p-773w-m3pm
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vgz6-nvj3-xqft
80
url VCID-vwpg-z9en-6yej
vulnerability_id VCID-vwpg-z9en-6yej
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability. This vulnerability could allow an admin attacker to inject and execute arbitrary JavaScript code within the context of the user's browser session. Exploitation of this issue requires user interaction, such as convincing a victim to click on a malicious link. Confidentiality and integrity impact is high as it affects other admin accounts.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39400
reference_id
reference_type
scores
0
value 0.01472
scoring_system epss
scoring_elements 0.81419
published_at 2026-06-12T12:55:00Z
1
value 0.01472
scoring_system epss
scoring_elements 0.81428
published_at 2026-06-13T12:55:00Z
2
value 0.01472
scoring_system epss
scoring_elements 0.81358
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39400
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:12:38Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39400
reference_id CVE-2024-39400
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39400
4
reference_url https://github.com/advisories/GHSA-52fg-wjxm-pp44
reference_id GHSA-52fg-wjxm-pp44
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-52fg-wjxm-pp44
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39400, GHSA-52fg-wjxm-pp44
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vwpg-z9en-6yej
81
url VCID-wfdz-b6c4-quhq
vulnerability_id VCID-wfdz-b6c4-quhq
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and disclose minor information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39411
reference_id
reference_type
scores
0
value 0.00306
scoring_system epss
scoring_elements 0.54386
published_at 2026-06-12T12:55:00Z
1
value 0.00306
scoring_system epss
scoring_elements 0.54403
published_at 2026-06-13T12:55:00Z
2
value 0.00306
scoring_system epss
scoring_elements 0.54261
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39411
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:11:14Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39411
reference_id CVE-2024-39411
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39411
4
reference_url https://github.com/advisories/GHSA-qm77-mqf3-fmhq
reference_id GHSA-qm77-mqf3-fmhq
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qm77-mqf3-fmhq
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39411, GHSA-qm77-mqf3-fmhq
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wfdz-b6c4-quhq
82
url VCID-wxkj-7zgv-x7bc
vulnerability_id VCID-wxkj-7zgv-x7bc
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this race condition to alter a condition after it has been checked but before it is used, potentially bypassing rate limiting mechanisms. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24430
reference_id
reference_type
scores
0
value 0.00103
scoring_system epss
scoring_elements 0.27912
published_at 2026-06-13T12:55:00Z
1
value 0.00103
scoring_system epss
scoring_elements 0.27686
published_at 2026-06-11T12:55:00Z
2
value 0.00103
scoring_system epss
scoring_elements 0.27887
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24430
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24430
reference_id
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24430
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 3.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-11T18:48:47Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-6w27-c66f-gvhq
reference_id GHSA-6w27-c66f-gvhq
reference_type
scores
url https://github.com/advisories/GHSA-6w27-c66f-gvhq
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24430, GHSA-6w27-c66f-gvhq
risk_score 1.6
exploitability 0.5
weighted_severity 3.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wxkj-7zgv-x7bc
83
url VCID-xgh4-b9yn-dkh4
vulnerability_id VCID-xgh4-b9yn-dkh4
summary Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain limited write access. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-27206
reference_id
reference_type
scores
0
value 0.00706
scoring_system epss
scoring_elements 0.72671
published_at 2026-06-12T12:55:00Z
1
value 0.00706
scoring_system epss
scoring_elements 0.72686
published_at 2026-06-13T12:55:00Z
2
value 0.00706
scoring_system epss
scoring_elements 0.72594
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-27206
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-27206
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-27206
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-50.html
reference_id apsb25-50.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-10T18:08:33Z/
url https://helpx.adobe.com/security/products/magento/apsb25-50.html
4
reference_url https://github.com/advisories/GHSA-g2pj-xmxq-3r9q
reference_id GHSA-g2pj-xmxq-3r9q
reference_type
scores
url https://github.com/advisories/GHSA-g2pj-xmxq-3r9q
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p6
purl pkg:composer/magento/community-edition@2.4.7-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gx3s-7cxk-pyfc
8
vulnerability VCID-h2ju-dedu-fqad
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p6
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
2
url pkg:composer/magento/community-edition@2.4.9-alpha1
purl pkg:composer/magento/community-edition@2.4.9-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-ktnj-j4xu-uufs
9
vulnerability VCID-pcm6-819d-6uhm
10
vulnerability VCID-twdq-g82m-nqcp
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha1
aliases CVE-2025-27206, GHSA-g2pj-xmxq-3r9q
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xgh4-b9yn-dkh4
84
url VCID-xjd4-w9bn-mbex
vulnerability_id VCID-xjd4-w9bn-mbex
summary Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access leading to a limited impact to confidentiality and a high impact to integrity. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-43585
reference_id
reference_type
scores
0
value 0.00591
scoring_system epss
scoring_elements 0.698
published_at 2026-06-13T12:55:00Z
1
value 0.00591
scoring_system epss
scoring_elements 0.69695
published_at 2026-06-11T12:55:00Z
2
value 0.00591
scoring_system epss
scoring_elements 0.69786
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-43585
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-43585
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-43585
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-50.html
reference_id apsb25-50.html
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-10T17:23:05Z/
url https://helpx.adobe.com/security/products/magento/apsb25-50.html
4
reference_url https://github.com/advisories/GHSA-r487-9vv5-75gg
reference_id GHSA-r487-9vv5-75gg
reference_type
scores
url https://github.com/advisories/GHSA-r487-9vv5-75gg
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p6
purl pkg:composer/magento/community-edition@2.4.7-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gx3s-7cxk-pyfc
8
vulnerability VCID-h2ju-dedu-fqad
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p6
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
2
url pkg:composer/magento/community-edition@2.4.9-alpha1
purl pkg:composer/magento/community-edition@2.4.9-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-ktnj-j4xu-uufs
9
vulnerability VCID-pcm6-819d-6uhm
10
vulnerability VCID-twdq-g82m-nqcp
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha1
aliases CVE-2025-43585, GHSA-r487-9vv5-75gg
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xjd4-w9bn-mbex
85
url VCID-xmby-7b1y-v3cn
vulnerability_id VCID-xmby-7b1y-v3cn
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and modify minor information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39404
reference_id
reference_type
scores
0
value 0.00243
scoring_system epss
scoring_elements 0.48
published_at 2026-06-12T12:55:00Z
1
value 0.00243
scoring_system epss
scoring_elements 0.48016
published_at 2026-06-13T12:55:00Z
2
value 0.00243
scoring_system epss
scoring_elements 0.47859
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39404
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:12:52Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39404
reference_id CVE-2024-39404
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39404
4
reference_url https://github.com/advisories/GHSA-qrh3-vxjg-h9h6
reference_id GHSA-qrh3-vxjg-h9h6
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qrh3-vxjg-h9h6
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39404, GHSA-qrh3-vxjg-h9h6
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xmby-7b1y-v3cn
86
url VCID-xqc4-jf6e-abfg
vulnerability_id VCID-xqc4-jf6e-abfg
summary Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security measures and gain limited unauthorized access. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-49549
reference_id
reference_type
scores
0
value 0.00514
scoring_system epss
scoring_elements 0.67108
published_at 2026-06-12T12:55:00Z
1
value 0.00514
scoring_system epss
scoring_elements 0.67121
published_at 2026-06-13T12:55:00Z
2
value 0.00514
scoring_system epss
scoring_elements 0.67016
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-49549
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-49549
reference_id
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-49549
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-50.html
reference_id apsb25-50.html
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
1
value LOW
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-06-25T18:12:28Z/
url https://helpx.adobe.com/security/products/magento/apsb25-50.html
4
reference_url https://github.com/advisories/GHSA-85jx-x9r4-45m2
reference_id GHSA-85jx-x9r4-45m2
reference_type
scores
url https://github.com/advisories/GHSA-85jx-x9r4-45m2
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p6
purl pkg:composer/magento/community-edition@2.4.7-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gx3s-7cxk-pyfc
8
vulnerability VCID-h2ju-dedu-fqad
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p6
1
url pkg:composer/magento/community-edition@2.4.8-beta1
purl pkg:composer/magento/community-edition@2.4.8-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1vq9-br2m-dbby
1
vulnerability VCID-313z-h2v4-c3fr
2
vulnerability VCID-3a8p-9krx-23e8
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-5edy-fp8q-97fp
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-7bmk-3ab2-9ba6
7
vulnerability VCID-9gb1-p5qf-3kd2
8
vulnerability VCID-9gbf-swtt-7bhz
9
vulnerability VCID-bvfd-gs5b-dyg7
10
vulnerability VCID-ctrj-y3d6-a7dv
11
vulnerability VCID-cyy2-3rr3-jkc8
12
vulnerability VCID-d9zc-rh9p-4bde
13
vulnerability VCID-dytj-h56v-bke9
14
vulnerability VCID-esjc-zzqy-nycf
15
vulnerability VCID-eusf-bc81-9uhv
16
vulnerability VCID-ferd-u8gt-akds
17
vulnerability VCID-fqkf-67fw-cyb8
18
vulnerability VCID-gac9-1nnp-67cc
19
vulnerability VCID-gx3s-7cxk-pyfc
20
vulnerability VCID-gzga-qjaf-kugh
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jc6r-vmnc-r3g9
23
vulnerability VCID-kjc9-vrhf-hfav
24
vulnerability VCID-ktnj-j4xu-uufs
25
vulnerability VCID-kxjv-xm7r-hkhs
26
vulnerability VCID-ntst-nee5-63d3
27
vulnerability VCID-pcm6-819d-6uhm
28
vulnerability VCID-pfvk-8q6r-e7c5
29
vulnerability VCID-psnm-zaza-tuf9
30
vulnerability VCID-pu8a-r3v2-g7h9
31
vulnerability VCID-q68u-w433-tqb9
32
vulnerability VCID-qh9p-8b9r-mufh
33
vulnerability VCID-rm7u-jwat-v7f1
34
vulnerability VCID-t4gd-uv9g-ukh5
35
vulnerability VCID-twdq-g82m-nqcp
36
vulnerability VCID-u9vz-axk1-fqfn
37
vulnerability VCID-wxkj-7zgv-x7bc
38
vulnerability VCID-z97t-ffda-vfes
39
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta1
2
url pkg:composer/magento/community-edition@2.4.9-alpha1
purl pkg:composer/magento/community-edition@2.4.9-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-ktnj-j4xu-uufs
9
vulnerability VCID-pcm6-819d-6uhm
10
vulnerability VCID-twdq-g82m-nqcp
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha1
aliases CVE-2025-49549, GHSA-85jx-x9r4-45m2
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xqc4-jf6e-abfg
87
url VCID-z97t-ffda-vfes
vulnerability_id VCID-z97t-ffda-vfes
summary Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Scope is changed to that of other high-privileged accounts, leading to a high impact on confidentiality, integrity, and availability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-47110
reference_id
reference_type
scores
0
value 0.00709
scoring_system epss
scoring_elements 0.72759
published_at 2026-06-12T12:55:00Z
1
value 0.00709
scoring_system epss
scoring_elements 0.72774
published_at 2026-06-13T12:55:00Z
2
value 0.00709
scoring_system epss
scoring_elements 0.72682
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-47110
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-47110
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-47110
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-50.html
reference_id apsb25-50.html
reference_type
scores
0
value 8.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
1
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-06-10T18:09:25Z/
url https://helpx.adobe.com/security/products/magento/apsb25-50.html
4
reference_url https://github.com/advisories/GHSA-j934-vjh5-vf9r
reference_id GHSA-j934-vjh5-vf9r
reference_type
scores
url https://github.com/advisories/GHSA-j934-vjh5-vf9r
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p6
purl pkg:composer/magento/community-edition@2.4.7-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gx3s-7cxk-pyfc
8
vulnerability VCID-h2ju-dedu-fqad
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p6
1
url pkg:composer/magento/community-edition@2.4.8-p1
purl pkg:composer/magento/community-edition@2.4.8-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-ktnj-j4xu-uufs
9
vulnerability VCID-pcm6-819d-6uhm
10
vulnerability VCID-twdq-g82m-nqcp
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-p1
2
url pkg:composer/magento/community-edition@2.4.9-alpha1
purl pkg:composer/magento/community-edition@2.4.9-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-ktnj-j4xu-uufs
9
vulnerability VCID-pcm6-819d-6uhm
10
vulnerability VCID-twdq-g82m-nqcp
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.9-alpha1
aliases CVE-2025-47110, GHSA-j934-vjh5-vf9r
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z97t-ffda-vfes
88
url VCID-za87-d5x9-wuby
vulnerability_id VCID-za87-d5x9-wuby
summary Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-24413
reference_id
reference_type
scores
0
value 0.01321
scoring_system epss
scoring_elements 0.80361
published_at 2026-06-12T12:55:00Z
1
value 0.01321
scoring_system epss
scoring_elements 0.80377
published_at 2026-06-13T12:55:00Z
2
value 0.01321
scoring_system epss
scoring_elements 0.803
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-24413
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-24413
reference_id
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-24413
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-08.html
reference_id apsb25-08.html
reference_type
scores
0
value 8.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-14T04:55:44Z/
url https://helpx.adobe.com/security/products/magento/apsb25-08.html
4
reference_url https://github.com/advisories/GHSA-xwgx-8v72-4j5j
reference_id GHSA-xwgx-8v72-4j5j
reference_type
scores
url https://github.com/advisories/GHSA-xwgx-8v72-4j5j
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-p4
purl pkg:composer/magento/community-edition@2.4.7-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-bvfd-gs5b-dyg7
6
vulnerability VCID-eusf-bc81-9uhv
7
vulnerability VCID-fqkf-67fw-cyb8
8
vulnerability VCID-gakd-m2af-z7c2
9
vulnerability VCID-gx3s-7cxk-pyfc
10
vulnerability VCID-h2ju-dedu-fqad
11
vulnerability VCID-jc6r-vmnc-r3g9
12
vulnerability VCID-ktnj-j4xu-uufs
13
vulnerability VCID-kxjv-xm7r-hkhs
14
vulnerability VCID-pcm6-819d-6uhm
15
vulnerability VCID-q68u-w433-tqb9
16
vulnerability VCID-twdq-g82m-nqcp
17
vulnerability VCID-xgh4-b9yn-dkh4
18
vulnerability VCID-xjd4-w9bn-mbex
19
vulnerability VCID-xqc4-jf6e-abfg
20
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p4
1
url pkg:composer/magento/community-edition@2.4.8-beta2
purl pkg:composer/magento/community-edition@2.4.8-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gx3s-7cxk-pyfc
7
vulnerability VCID-h2ju-dedu-fqad
8
vulnerability VCID-jc6r-vmnc-r3g9
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8-beta2
aliases CVE-2025-24413, GHSA-xwgx-8v72-4j5j
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-za87-d5x9-wuby
89
url VCID-zssu-1dmn-sycb
vulnerability_id VCID-zssu-1dmn-sycb
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38218
reference_id
reference_type
scores
0
value 0.00692
scoring_system epss
scoring_elements 0.7232
published_at 2026-06-11T12:55:00Z
1
value 0.00692
scoring_system epss
scoring_elements 0.72402
published_at 2026-06-12T12:55:00Z
2
value 0.00692
scoring_system epss
scoring_elements 0.72416
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38218
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38218
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-38218
3
reference_url https://github.com/advisories/GHSA-rpc7-gf58-v3x2
reference_id GHSA-rpc7-gf58-v3x2
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rpc7-gf58-v3x2
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-beta2
purl pkg:composer/magento/community-edition@2.4.7-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-5edy-fp8q-97fp
12
vulnerability VCID-6d1u-exkw-hbfu
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-78hy-q8kh-kyh7
15
vulnerability VCID-7bmk-3ab2-9ba6
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-96hr-sbyj-27dw
20
vulnerability VCID-9gb1-p5qf-3kd2
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-bvfd-gs5b-dyg7
27
vulnerability VCID-ctrj-y3d6-a7dv
28
vulnerability VCID-cyy2-3rr3-jkc8
29
vulnerability VCID-d9zc-rh9p-4bde
30
vulnerability VCID-dktm-v3jw-f7de
31
vulnerability VCID-dsy7-gm7v-tqc8
32
vulnerability VCID-dytj-h56v-bke9
33
vulnerability VCID-e2t8-b5yy-zkhn
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-eusf-bc81-9uhv
36
vulnerability VCID-ferd-u8gt-akds
37
vulnerability VCID-fqkf-67fw-cyb8
38
vulnerability VCID-gac9-1nnp-67cc
39
vulnerability VCID-gakd-m2af-z7c2
40
vulnerability VCID-ggtj-fbzy-87fx
41
vulnerability VCID-gx3s-7cxk-pyfc
42
vulnerability VCID-gxbc-u5mr-f3c9
43
vulnerability VCID-gzga-qjaf-kugh
44
vulnerability VCID-h2ju-dedu-fqad
45
vulnerability VCID-j9e4-4xta-6qc5
46
vulnerability VCID-jnuu-9mt7-jyd5
47
vulnerability VCID-jyhf-huep-tya2
48
vulnerability VCID-kfct-k5af-n7fu
49
vulnerability VCID-kjc9-vrhf-hfav
50
vulnerability VCID-ktnj-j4xu-uufs
51
vulnerability VCID-kxjv-xm7r-hkhs
52
vulnerability VCID-mccb-abc5-9yfs
53
vulnerability VCID-ngx2-ewzf-xbd4
54
vulnerability VCID-ntst-nee5-63d3
55
vulnerability VCID-pb4n-m8cv-9bb7
56
vulnerability VCID-pcm6-819d-6uhm
57
vulnerability VCID-pfvk-8q6r-e7c5
58
vulnerability VCID-psnm-zaza-tuf9
59
vulnerability VCID-pu8a-r3v2-g7h9
60
vulnerability VCID-q68u-w433-tqb9
61
vulnerability VCID-qbx1-jqke-v7hf
62
vulnerability VCID-qh9p-8b9r-mufh
63
vulnerability VCID-qnpc-4r4b-3uhx
64
vulnerability VCID-rm7u-jwat-v7f1
65
vulnerability VCID-rw4d-b9yt-mbhz
66
vulnerability VCID-s45p-jru3-w3df
67
vulnerability VCID-s7t9-h2jx-9bgr
68
vulnerability VCID-t4gd-uv9g-ukh5
69
vulnerability VCID-twda-bvut-9bhp
70
vulnerability VCID-twdq-g82m-nqcp
71
vulnerability VCID-u9vz-axk1-fqfn
72
vulnerability VCID-vgz6-nvj3-xqft
73
vulnerability VCID-vwpg-z9en-6yej
74
vulnerability VCID-wfdz-b6c4-quhq
75
vulnerability VCID-wxkj-7zgv-x7bc
76
vulnerability VCID-xgh4-b9yn-dkh4
77
vulnerability VCID-xjd4-w9bn-mbex
78
vulnerability VCID-xmby-7b1y-v3cn
79
vulnerability VCID-xqc4-jf6e-abfg
80
vulnerability VCID-z97t-ffda-vfes
81
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta2
aliases CVE-2023-38218, GHSA-rpc7-gf58-v3x2
risk_score 4.0
exploitability 0.5
weighted_severity 7.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zssu-1dmn-sycb
90
url VCID-zym7-1cr7-mkaa
vulnerability_id VCID-zym7-1cr7-mkaa
summary Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Authorization vulnerability that could lead in a security feature bypass in a way that an attacker could access unauthorised data. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38220
reference_id
reference_type
scores
0
value 0.00153
scoring_system epss
scoring_elements 0.35963
published_at 2026-06-13T12:55:00Z
1
value 0.00153
scoring_system epss
scoring_elements 0.3576
published_at 2026-06-11T12:55:00Z
2
value 0.00153
scoring_system epss
scoring_elements 0.3594
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38220
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38220
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-38220
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-50.html
reference_id apsb23-50.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-26T21:50:06Z/
url https://helpx.adobe.com/security/products/magento/apsb23-50.html
4
reference_url https://github.com/advisories/GHSA-grc6-r6f8-xj7c
reference_id GHSA-grc6-r6f8-xj7c
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-grc6-r6f8-xj7c
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.7-beta2
purl pkg:composer/magento/community-edition@2.4.7-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-5edy-fp8q-97fp
12
vulnerability VCID-6d1u-exkw-hbfu
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-78hy-q8kh-kyh7
15
vulnerability VCID-7bmk-3ab2-9ba6
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-96hr-sbyj-27dw
20
vulnerability VCID-9gb1-p5qf-3kd2
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-bvfd-gs5b-dyg7
27
vulnerability VCID-ctrj-y3d6-a7dv
28
vulnerability VCID-cyy2-3rr3-jkc8
29
vulnerability VCID-d9zc-rh9p-4bde
30
vulnerability VCID-dktm-v3jw-f7de
31
vulnerability VCID-dsy7-gm7v-tqc8
32
vulnerability VCID-dytj-h56v-bke9
33
vulnerability VCID-e2t8-b5yy-zkhn
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-eusf-bc81-9uhv
36
vulnerability VCID-ferd-u8gt-akds
37
vulnerability VCID-fqkf-67fw-cyb8
38
vulnerability VCID-gac9-1nnp-67cc
39
vulnerability VCID-gakd-m2af-z7c2
40
vulnerability VCID-ggtj-fbzy-87fx
41
vulnerability VCID-gx3s-7cxk-pyfc
42
vulnerability VCID-gxbc-u5mr-f3c9
43
vulnerability VCID-gzga-qjaf-kugh
44
vulnerability VCID-h2ju-dedu-fqad
45
vulnerability VCID-j9e4-4xta-6qc5
46
vulnerability VCID-jnuu-9mt7-jyd5
47
vulnerability VCID-jyhf-huep-tya2
48
vulnerability VCID-kfct-k5af-n7fu
49
vulnerability VCID-kjc9-vrhf-hfav
50
vulnerability VCID-ktnj-j4xu-uufs
51
vulnerability VCID-kxjv-xm7r-hkhs
52
vulnerability VCID-mccb-abc5-9yfs
53
vulnerability VCID-ngx2-ewzf-xbd4
54
vulnerability VCID-ntst-nee5-63d3
55
vulnerability VCID-pb4n-m8cv-9bb7
56
vulnerability VCID-pcm6-819d-6uhm
57
vulnerability VCID-pfvk-8q6r-e7c5
58
vulnerability VCID-psnm-zaza-tuf9
59
vulnerability VCID-pu8a-r3v2-g7h9
60
vulnerability VCID-q68u-w433-tqb9
61
vulnerability VCID-qbx1-jqke-v7hf
62
vulnerability VCID-qh9p-8b9r-mufh
63
vulnerability VCID-qnpc-4r4b-3uhx
64
vulnerability VCID-rm7u-jwat-v7f1
65
vulnerability VCID-rw4d-b9yt-mbhz
66
vulnerability VCID-s45p-jru3-w3df
67
vulnerability VCID-s7t9-h2jx-9bgr
68
vulnerability VCID-t4gd-uv9g-ukh5
69
vulnerability VCID-twda-bvut-9bhp
70
vulnerability VCID-twdq-g82m-nqcp
71
vulnerability VCID-u9vz-axk1-fqfn
72
vulnerability VCID-vgz6-nvj3-xqft
73
vulnerability VCID-vwpg-z9en-6yej
74
vulnerability VCID-wfdz-b6c4-quhq
75
vulnerability VCID-wxkj-7zgv-x7bc
76
vulnerability VCID-xgh4-b9yn-dkh4
77
vulnerability VCID-xjd4-w9bn-mbex
78
vulnerability VCID-xmby-7b1y-v3cn
79
vulnerability VCID-xqc4-jf6e-abfg
80
vulnerability VCID-z97t-ffda-vfes
81
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta2
aliases CVE-2023-38220, GHSA-grc6-r6f8-xj7c
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zym7-1cr7-mkaa
Fixing_vulnerabilities
0
url VCID-158t-bqnb-83d4
vulnerability_id VCID-158t-bqnb-83d4
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read. An admin attacker could exploit this vulnerability to gain access to files and directories that are outside the restricted directory. Exploitation of this issue does not require user interaction and scope is changed.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39406
reference_id
reference_type
scores
0
value 0.00916
scoring_system epss
scoring_elements 0.76369
published_at 2026-06-11T12:55:00Z
1
value 0.00916
scoring_system epss
scoring_elements 0.76454
published_at 2026-06-13T12:55:00Z
2
value 0.00916
scoring_system epss
scoring_elements 0.76439
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39406
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
1
value 6.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
1
value 6.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:12:23Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39406
reference_id CVE-2024-39406
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
1
value 6.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39406
4
reference_url https://github.com/advisories/GHSA-6pxh-2557-5cj5
reference_id GHSA-6pxh-2557-5cj5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6pxh-2557-5cj5
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p10
purl pkg:composer/magento/community-edition@2.4.4-p10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p10
1
url pkg:composer/magento/community-edition@2.4.5-p9
purl pkg:composer/magento/community-edition@2.4.5-p9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-7bmk-3ab2-9ba6
2
vulnerability VCID-eusf-bc81-9uhv
3
vulnerability VCID-h2ju-dedu-fqad
4
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p9
2
url pkg:composer/magento/community-edition@2.4.6-p7
purl pkg:composer/magento/community-edition@2.4.6-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-5edy-fp8q-97fp
7
vulnerability VCID-78hy-q8kh-kyh7
8
vulnerability VCID-7j68-gund-4qhp
9
vulnerability VCID-8gwb-c3ck-37f8
10
vulnerability VCID-9gbf-swtt-7bhz
11
vulnerability VCID-a6gj-zm14-aqhq
12
vulnerability VCID-ax9q-y1rb-33b2
13
vulnerability VCID-bfp1-cndf-d7d7
14
vulnerability VCID-ctrj-y3d6-a7dv
15
vulnerability VCID-cyy2-3rr3-jkc8
16
vulnerability VCID-d9zc-rh9p-4bde
17
vulnerability VCID-dktm-v3jw-f7de
18
vulnerability VCID-dytj-h56v-bke9
19
vulnerability VCID-e2t8-b5yy-zkhn
20
vulnerability VCID-esjc-zzqy-nycf
21
vulnerability VCID-ferd-u8gt-akds
22
vulnerability VCID-gac9-1nnp-67cc
23
vulnerability VCID-ggtj-fbzy-87fx
24
vulnerability VCID-gzga-qjaf-kugh
25
vulnerability VCID-kfct-k5af-n7fu
26
vulnerability VCID-kjc9-vrhf-hfav
27
vulnerability VCID-mccb-abc5-9yfs
28
vulnerability VCID-ngx2-ewzf-xbd4
29
vulnerability VCID-ntst-nee5-63d3
30
vulnerability VCID-pb4n-m8cv-9bb7
31
vulnerability VCID-pfvk-8q6r-e7c5
32
vulnerability VCID-psnm-zaza-tuf9
33
vulnerability VCID-pu8a-r3v2-g7h9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-rw4d-b9yt-mbhz
37
vulnerability VCID-s45p-jru3-w3df
38
vulnerability VCID-t4gd-uv9g-ukh5
39
vulnerability VCID-twda-bvut-9bhp
40
vulnerability VCID-u9vz-axk1-fqfn
41
vulnerability VCID-vgz6-nvj3-xqft
42
vulnerability VCID-wxkj-7zgv-x7bc
43
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p7
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
4
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39406, GHSA-6pxh-2557-5cj5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-158t-bqnb-83d4
1
url VCID-1bw2-wubb-hqdf
vulnerability_id VCID-1bw2-wubb-hqdf
summary Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to trick a victim into performing actions they did not intend to do, which could be used to bypass security measures and gain unauthorized access. Exploitation of this issue requires user interaction, typically in the form of the victim clicking a link or visiting a malicious website.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-20718
reference_id
reference_type
scores
0
value 0.0012
scoring_system epss
scoring_elements 0.3052
published_at 2026-06-11T12:55:00Z
1
value 0.0012
scoring_system epss
scoring_elements 0.30735
published_at 2026-06-13T12:55:00Z
2
value 0.0012
scoring_system epss
scoring_elements 0.30716
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-20718
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-03.html
reference_id apsb24-03.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-29T17:27:46Z/
url https://helpx.adobe.com/security/products/magento/apsb24-03.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-20718
reference_id CVE-2024-20718
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-20718
4
reference_url https://github.com/advisories/GHSA-hqgj-4396-hmxv
reference_id GHSA-hqgj-4396-hmxv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hqgj-4396-hmxv
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p7
purl pkg:composer/magento/community-edition@2.4.4-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-549e-3kmc-cyfw
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-96hr-sbyj-27dw
5
vulnerability VCID-9gb1-p5qf-3kd2
6
vulnerability VCID-eban-ja9z-f7ep
7
vulnerability VCID-eusf-bc81-9uhv
8
vulnerability VCID-fqkf-67fw-cyb8
9
vulnerability VCID-frhp-vgpt-g7am
10
vulnerability VCID-gakd-m2af-z7c2
11
vulnerability VCID-gx3s-7cxk-pyfc
12
vulnerability VCID-h2ju-dedu-fqad
13
vulnerability VCID-jnuu-9mt7-jyd5
14
vulnerability VCID-kf6b-mshs-23fa
15
vulnerability VCID-ktnj-j4xu-uufs
16
vulnerability VCID-pcm6-819d-6uhm
17
vulnerability VCID-twdq-g82m-nqcp
18
vulnerability VCID-xgh4-b9yn-dkh4
19
vulnerability VCID-xgk2-yecx-q3ff
20
vulnerability VCID-xjd4-w9bn-mbex
21
vulnerability VCID-xqc4-jf6e-abfg
22
vulnerability VCID-z97t-ffda-vfes
23
vulnerability VCID-zthr-mpwx-1fef
24
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p7
1
url pkg:composer/magento/community-edition@2.4.5-p6
purl pkg:composer/magento/community-edition@2.4.5-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-2t3q-pmg5-qyhn
2
vulnerability VCID-368r-um85-k3d2
3
vulnerability VCID-3s5p-wb18-13ge
4
vulnerability VCID-3uj4-thpr-cue1
5
vulnerability VCID-3ydj-usv4-47fq
6
vulnerability VCID-4b5p-wqtj-7kbe
7
vulnerability VCID-4nqq-nrne-17a2
8
vulnerability VCID-549e-3kmc-cyfw
9
vulnerability VCID-6v47-xgpq-zkgf
10
vulnerability VCID-7bmk-3ab2-9ba6
11
vulnerability VCID-8365-zgh2-w3cc
12
vulnerability VCID-96hr-sbyj-27dw
13
vulnerability VCID-bftg-2sea-57cv
14
vulnerability VCID-dsy7-gm7v-tqc8
15
vulnerability VCID-eban-ja9z-f7ep
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-gxbc-u5mr-f3c9
19
vulnerability VCID-h2ju-dedu-fqad
20
vulnerability VCID-j9e4-4xta-6qc5
21
vulnerability VCID-jeur-3jww-dqee
22
vulnerability VCID-jnuu-9mt7-jyd5
23
vulnerability VCID-jyhf-huep-tya2
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-pcm6-819d-6uhm
26
vulnerability VCID-qbx1-jqke-v7hf
27
vulnerability VCID-qnpc-4r4b-3uhx
28
vulnerability VCID-s7t9-h2jx-9bgr
29
vulnerability VCID-u52p-wrjp-quhk
30
vulnerability VCID-vwpg-z9en-6yej
31
vulnerability VCID-wfdz-b6c4-quhq
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xmby-7b1y-v3cn
34
vulnerability VCID-zthr-mpwx-1fef
35
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p6
2
url pkg:composer/magento/community-edition@2.4.6-p4
purl pkg:composer/magento/community-edition@2.4.6-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-4b5p-wqtj-7kbe
13
vulnerability VCID-549e-3kmc-cyfw
14
vulnerability VCID-5edy-fp8q-97fp
15
vulnerability VCID-6v47-xgpq-zkgf
16
vulnerability VCID-78hy-q8kh-kyh7
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-96hr-sbyj-27dw
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-ctrj-y3d6-a7dv
27
vulnerability VCID-cyy2-3rr3-jkc8
28
vulnerability VCID-d9zc-rh9p-4bde
29
vulnerability VCID-dktm-v3jw-f7de
30
vulnerability VCID-dsy7-gm7v-tqc8
31
vulnerability VCID-dytj-h56v-bke9
32
vulnerability VCID-e2t8-b5yy-zkhn
33
vulnerability VCID-eban-ja9z-f7ep
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-ferd-u8gt-akds
36
vulnerability VCID-frhp-vgpt-g7am
37
vulnerability VCID-gac9-1nnp-67cc
38
vulnerability VCID-ggtj-fbzy-87fx
39
vulnerability VCID-gxbc-u5mr-f3c9
40
vulnerability VCID-gzga-qjaf-kugh
41
vulnerability VCID-j9e4-4xta-6qc5
42
vulnerability VCID-jeur-3jww-dqee
43
vulnerability VCID-jnuu-9mt7-jyd5
44
vulnerability VCID-jyhf-huep-tya2
45
vulnerability VCID-kf6b-mshs-23fa
46
vulnerability VCID-kfct-k5af-n7fu
47
vulnerability VCID-kjc9-vrhf-hfav
48
vulnerability VCID-mccb-abc5-9yfs
49
vulnerability VCID-ngx2-ewzf-xbd4
50
vulnerability VCID-ntst-nee5-63d3
51
vulnerability VCID-pb4n-m8cv-9bb7
52
vulnerability VCID-pfvk-8q6r-e7c5
53
vulnerability VCID-psnm-zaza-tuf9
54
vulnerability VCID-pu8a-r3v2-g7h9
55
vulnerability VCID-qbx1-jqke-v7hf
56
vulnerability VCID-qh9p-8b9r-mufh
57
vulnerability VCID-qnpc-4r4b-3uhx
58
vulnerability VCID-rm7u-jwat-v7f1
59
vulnerability VCID-rw4d-b9yt-mbhz
60
vulnerability VCID-s45p-jru3-w3df
61
vulnerability VCID-s7t9-h2jx-9bgr
62
vulnerability VCID-t4gd-uv9g-ukh5
63
vulnerability VCID-twda-bvut-9bhp
64
vulnerability VCID-u52p-wrjp-quhk
65
vulnerability VCID-u9vz-axk1-fqfn
66
vulnerability VCID-vgz6-nvj3-xqft
67
vulnerability VCID-vwpg-z9en-6yej
68
vulnerability VCID-wfdz-b6c4-quhq
69
vulnerability VCID-wxkj-7zgv-x7bc
70
vulnerability VCID-xgk2-yecx-q3ff
71
vulnerability VCID-xmby-7b1y-v3cn
72
vulnerability VCID-za87-d5x9-wuby
73
vulnerability VCID-zthr-mpwx-1fef
74
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p4
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2024-20718, GHSA-hqgj-4396-hmxv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1bw2-wubb-hqdf
2
url VCID-2tge-6ken-kqge
vulnerability_id VCID-2tge-6ken-kqge
summary Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38208
reference_id
reference_type
scores
0
value 0.03849
scoring_system epss
scoring_elements 0.88498
published_at 2026-06-12T12:55:00Z
1
value 0.03849
scoring_system epss
scoring_elements 0.88505
published_at 2026-06-13T12:55:00Z
2
value 0.03849
scoring_system epss
scoring_elements 0.88458
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38208
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 7.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38208
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 7.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-38208
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-42.html
reference_id apsb23-42.html
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 7.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-26T21:53:29Z/
url https://helpx.adobe.com/security/products/magento/apsb23-42.html
4
reference_url https://github.com/advisories/GHSA-mxc9-g6m4-2v35
reference_id GHSA-mxc9-g6m4-2v35
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mxc9-g6m4-2v35
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p5
purl pkg:composer/magento/community-edition@2.4.4-p5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-466x-mpt9-gbgy
2
vulnerability VCID-4nqq-nrne-17a2
3
vulnerability VCID-549e-3kmc-cyfw
4
vulnerability VCID-6d1u-exkw-hbfu
5
vulnerability VCID-7bmk-3ab2-9ba6
6
vulnerability VCID-8hfe-bt2u-37f9
7
vulnerability VCID-96hr-sbyj-27dw
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-e9g4-n5c8-6yf9
10
vulnerability VCID-eban-ja9z-f7ep
11
vulnerability VCID-eusf-bc81-9uhv
12
vulnerability VCID-fb5x-afrq-87aj
13
vulnerability VCID-fqkf-67fw-cyb8
14
vulnerability VCID-frhp-vgpt-g7am
15
vulnerability VCID-fz2x-ms14-pkfs
16
vulnerability VCID-gakd-m2af-z7c2
17
vulnerability VCID-gx3s-7cxk-pyfc
18
vulnerability VCID-h2ju-dedu-fqad
19
vulnerability VCID-jkrp-j7st-27f3
20
vulnerability VCID-jnuu-9mt7-jyd5
21
vulnerability VCID-kf6b-mshs-23fa
22
vulnerability VCID-ktnj-j4xu-uufs
23
vulnerability VCID-pcm6-819d-6uhm
24
vulnerability VCID-pzjb-n7ah-ffcg
25
vulnerability VCID-q12a-kwpk-yufv
26
vulnerability VCID-qr8w-qwb5-6uag
27
vulnerability VCID-twdq-g82m-nqcp
28
vulnerability VCID-xgh4-b9yn-dkh4
29
vulnerability VCID-xgk2-yecx-q3ff
30
vulnerability VCID-xjd4-w9bn-mbex
31
vulnerability VCID-xqc4-jf6e-abfg
32
vulnerability VCID-z97t-ffda-vfes
33
vulnerability VCID-zssu-1dmn-sycb
34
vulnerability VCID-zthr-mpwx-1fef
35
vulnerability VCID-zv6m-4py8-3ydq
36
vulnerability VCID-zwem-swqk-1kaz
37
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p5
1
url pkg:composer/magento/community-edition@2.4.5-p4
purl pkg:composer/magento/community-edition@2.4.5-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-368r-um85-k3d2
4
vulnerability VCID-3s5p-wb18-13ge
5
vulnerability VCID-3uj4-thpr-cue1
6
vulnerability VCID-3ydj-usv4-47fq
7
vulnerability VCID-466x-mpt9-gbgy
8
vulnerability VCID-4b5p-wqtj-7kbe
9
vulnerability VCID-4nqq-nrne-17a2
10
vulnerability VCID-549e-3kmc-cyfw
11
vulnerability VCID-6v47-xgpq-zkgf
12
vulnerability VCID-7bmk-3ab2-9ba6
13
vulnerability VCID-8365-zgh2-w3cc
14
vulnerability VCID-8hfe-bt2u-37f9
15
vulnerability VCID-96hr-sbyj-27dw
16
vulnerability VCID-bftg-2sea-57cv
17
vulnerability VCID-dsy7-gm7v-tqc8
18
vulnerability VCID-e9g4-n5c8-6yf9
19
vulnerability VCID-eban-ja9z-f7ep
20
vulnerability VCID-eusf-bc81-9uhv
21
vulnerability VCID-fb5x-afrq-87aj
22
vulnerability VCID-frhp-vgpt-g7am
23
vulnerability VCID-fz2x-ms14-pkfs
24
vulnerability VCID-gxbc-u5mr-f3c9
25
vulnerability VCID-h2ju-dedu-fqad
26
vulnerability VCID-j9e4-4xta-6qc5
27
vulnerability VCID-jeur-3jww-dqee
28
vulnerability VCID-jkrp-j7st-27f3
29
vulnerability VCID-jnuu-9mt7-jyd5
30
vulnerability VCID-jyhf-huep-tya2
31
vulnerability VCID-kf6b-mshs-23fa
32
vulnerability VCID-pcm6-819d-6uhm
33
vulnerability VCID-pzjb-n7ah-ffcg
34
vulnerability VCID-q12a-kwpk-yufv
35
vulnerability VCID-qbx1-jqke-v7hf
36
vulnerability VCID-qnpc-4r4b-3uhx
37
vulnerability VCID-qr8w-qwb5-6uag
38
vulnerability VCID-s7t9-h2jx-9bgr
39
vulnerability VCID-u52p-wrjp-quhk
40
vulnerability VCID-vwpg-z9en-6yej
41
vulnerability VCID-wfdz-b6c4-quhq
42
vulnerability VCID-xgk2-yecx-q3ff
43
vulnerability VCID-xmby-7b1y-v3cn
44
vulnerability VCID-zssu-1dmn-sycb
45
vulnerability VCID-zthr-mpwx-1fef
46
vulnerability VCID-zv6m-4py8-3ydq
47
vulnerability VCID-zwem-swqk-1kaz
48
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p4
2
url pkg:composer/magento/community-edition@2.4.6-p2
purl pkg:composer/magento/community-edition@2.4.6-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-313z-h2v4-c3fr
8
vulnerability VCID-368r-um85-k3d2
9
vulnerability VCID-3a8p-9krx-23e8
10
vulnerability VCID-3s5p-wb18-13ge
11
vulnerability VCID-3uj4-thpr-cue1
12
vulnerability VCID-3ydj-usv4-47fq
13
vulnerability VCID-466x-mpt9-gbgy
14
vulnerability VCID-4b5p-wqtj-7kbe
15
vulnerability VCID-549e-3kmc-cyfw
16
vulnerability VCID-5edy-fp8q-97fp
17
vulnerability VCID-6v47-xgpq-zkgf
18
vulnerability VCID-78hy-q8kh-kyh7
19
vulnerability VCID-7j68-gund-4qhp
20
vulnerability VCID-8365-zgh2-w3cc
21
vulnerability VCID-8gwb-c3ck-37f8
22
vulnerability VCID-8hfe-bt2u-37f9
23
vulnerability VCID-96hr-sbyj-27dw
24
vulnerability VCID-9gbf-swtt-7bhz
25
vulnerability VCID-a6gj-zm14-aqhq
26
vulnerability VCID-ax9q-y1rb-33b2
27
vulnerability VCID-bfp1-cndf-d7d7
28
vulnerability VCID-bftg-2sea-57cv
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-eban-ja9z-f7ep
38
vulnerability VCID-esjc-zzqy-nycf
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-frhp-vgpt-g7am
42
vulnerability VCID-fz2x-ms14-pkfs
43
vulnerability VCID-gac9-1nnp-67cc
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gxbc-u5mr-f3c9
46
vulnerability VCID-gzga-qjaf-kugh
47
vulnerability VCID-j9e4-4xta-6qc5
48
vulnerability VCID-jeur-3jww-dqee
49
vulnerability VCID-jkrp-j7st-27f3
50
vulnerability VCID-jnuu-9mt7-jyd5
51
vulnerability VCID-jyhf-huep-tya2
52
vulnerability VCID-kf6b-mshs-23fa
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-mccb-abc5-9yfs
56
vulnerability VCID-ngx2-ewzf-xbd4
57
vulnerability VCID-ntst-nee5-63d3
58
vulnerability VCID-pb4n-m8cv-9bb7
59
vulnerability VCID-pfvk-8q6r-e7c5
60
vulnerability VCID-psnm-zaza-tuf9
61
vulnerability VCID-pu8a-r3v2-g7h9
62
vulnerability VCID-pzjb-n7ah-ffcg
63
vulnerability VCID-q12a-kwpk-yufv
64
vulnerability VCID-qbx1-jqke-v7hf
65
vulnerability VCID-qh9p-8b9r-mufh
66
vulnerability VCID-qnpc-4r4b-3uhx
67
vulnerability VCID-qr8w-qwb5-6uag
68
vulnerability VCID-rm7u-jwat-v7f1
69
vulnerability VCID-rw4d-b9yt-mbhz
70
vulnerability VCID-s45p-jru3-w3df
71
vulnerability VCID-s7t9-h2jx-9bgr
72
vulnerability VCID-t4gd-uv9g-ukh5
73
vulnerability VCID-twda-bvut-9bhp
74
vulnerability VCID-u52p-wrjp-quhk
75
vulnerability VCID-u9vz-axk1-fqfn
76
vulnerability VCID-vgz6-nvj3-xqft
77
vulnerability VCID-vwpg-z9en-6yej
78
vulnerability VCID-wfdz-b6c4-quhq
79
vulnerability VCID-wxkj-7zgv-x7bc
80
vulnerability VCID-xgk2-yecx-q3ff
81
vulnerability VCID-xmby-7b1y-v3cn
82
vulnerability VCID-za87-d5x9-wuby
83
vulnerability VCID-zssu-1dmn-sycb
84
vulnerability VCID-zthr-mpwx-1fef
85
vulnerability VCID-zv6m-4py8-3ydq
86
vulnerability VCID-zwem-swqk-1kaz
87
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p2
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-38208, GHSA-mxc9-g6m4-2v35
risk_score 4.1
exploitability 0.5
weighted_severity 8.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2tge-6ken-kqge
3
url VCID-3ydj-usv4-47fq
vulnerability_id VCID-3ydj-usv4-47fq
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass security features and perform minor integrity changes on behalf of a user. The vulnerability could be exploited by tricking a victim into clicking a link or loading a page that submits a malicious request. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39410
reference_id
reference_type
scores
0
value 0.00515
scoring_system epss
scoring_elements 0.67151
published_at 2026-06-13T12:55:00Z
1
value 0.00515
scoring_system epss
scoring_elements 0.67137
published_at 2026-06-12T12:55:00Z
2
value 0.00515
scoring_system epss
scoring_elements 0.67045
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39410
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
2
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:09:47Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39410
reference_id CVE-2024-39410
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39410
4
reference_url https://github.com/advisories/GHSA-4323-f82v-f6jr
reference_id GHSA-4323-f82v-f6jr
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4323-f82v-f6jr
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p10
purl pkg:composer/magento/community-edition@2.4.4-p10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p10
1
url pkg:composer/magento/community-edition@2.4.5-p9
purl pkg:composer/magento/community-edition@2.4.5-p9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-7bmk-3ab2-9ba6
2
vulnerability VCID-eusf-bc81-9uhv
3
vulnerability VCID-h2ju-dedu-fqad
4
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p9
2
url pkg:composer/magento/community-edition@2.4.6-p7
purl pkg:composer/magento/community-edition@2.4.6-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-5edy-fp8q-97fp
7
vulnerability VCID-78hy-q8kh-kyh7
8
vulnerability VCID-7j68-gund-4qhp
9
vulnerability VCID-8gwb-c3ck-37f8
10
vulnerability VCID-9gbf-swtt-7bhz
11
vulnerability VCID-a6gj-zm14-aqhq
12
vulnerability VCID-ax9q-y1rb-33b2
13
vulnerability VCID-bfp1-cndf-d7d7
14
vulnerability VCID-ctrj-y3d6-a7dv
15
vulnerability VCID-cyy2-3rr3-jkc8
16
vulnerability VCID-d9zc-rh9p-4bde
17
vulnerability VCID-dktm-v3jw-f7de
18
vulnerability VCID-dytj-h56v-bke9
19
vulnerability VCID-e2t8-b5yy-zkhn
20
vulnerability VCID-esjc-zzqy-nycf
21
vulnerability VCID-ferd-u8gt-akds
22
vulnerability VCID-gac9-1nnp-67cc
23
vulnerability VCID-ggtj-fbzy-87fx
24
vulnerability VCID-gzga-qjaf-kugh
25
vulnerability VCID-kfct-k5af-n7fu
26
vulnerability VCID-kjc9-vrhf-hfav
27
vulnerability VCID-mccb-abc5-9yfs
28
vulnerability VCID-ngx2-ewzf-xbd4
29
vulnerability VCID-ntst-nee5-63d3
30
vulnerability VCID-pb4n-m8cv-9bb7
31
vulnerability VCID-pfvk-8q6r-e7c5
32
vulnerability VCID-psnm-zaza-tuf9
33
vulnerability VCID-pu8a-r3v2-g7h9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-rw4d-b9yt-mbhz
37
vulnerability VCID-s45p-jru3-w3df
38
vulnerability VCID-t4gd-uv9g-ukh5
39
vulnerability VCID-twda-bvut-9bhp
40
vulnerability VCID-u9vz-axk1-fqfn
41
vulnerability VCID-vgz6-nvj3-xqft
42
vulnerability VCID-wxkj-7zgv-x7bc
43
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p7
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
4
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39410, GHSA-4323-f82v-f6jr
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3ydj-usv4-47fq
4
url VCID-4b5p-wqtj-7kbe
vulnerability_id VCID-4b5p-wqtj-7kbe
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass security features and perform minor integrity changes on behalf of a user. The vulnerability could be exploited by tricking a victim into clicking a link or loading a page that submits a malicious request. Exploitation of this issue requires user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39409
reference_id
reference_type
scores
0
value 0.00515
scoring_system epss
scoring_elements 0.67045
published_at 2026-06-11T12:55:00Z
1
value 0.00515
scoring_system epss
scoring_elements 0.67151
published_at 2026-06-13T12:55:00Z
2
value 0.00515
scoring_system epss
scoring_elements 0.67137
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39409
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:11:00Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39409
reference_id CVE-2024-39409
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39409
4
reference_url https://github.com/advisories/GHSA-rf4q-m23c-7q8r
reference_id GHSA-rf4q-m23c-7q8r
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rf4q-m23c-7q8r
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p10
purl pkg:composer/magento/community-edition@2.4.4-p10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p10
1
url pkg:composer/magento/community-edition@2.4.5-p9
purl pkg:composer/magento/community-edition@2.4.5-p9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-7bmk-3ab2-9ba6
2
vulnerability VCID-eusf-bc81-9uhv
3
vulnerability VCID-h2ju-dedu-fqad
4
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p9
2
url pkg:composer/magento/community-edition@2.4.6-p7
purl pkg:composer/magento/community-edition@2.4.6-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-5edy-fp8q-97fp
7
vulnerability VCID-78hy-q8kh-kyh7
8
vulnerability VCID-7j68-gund-4qhp
9
vulnerability VCID-8gwb-c3ck-37f8
10
vulnerability VCID-9gbf-swtt-7bhz
11
vulnerability VCID-a6gj-zm14-aqhq
12
vulnerability VCID-ax9q-y1rb-33b2
13
vulnerability VCID-bfp1-cndf-d7d7
14
vulnerability VCID-ctrj-y3d6-a7dv
15
vulnerability VCID-cyy2-3rr3-jkc8
16
vulnerability VCID-d9zc-rh9p-4bde
17
vulnerability VCID-dktm-v3jw-f7de
18
vulnerability VCID-dytj-h56v-bke9
19
vulnerability VCID-e2t8-b5yy-zkhn
20
vulnerability VCID-esjc-zzqy-nycf
21
vulnerability VCID-ferd-u8gt-akds
22
vulnerability VCID-gac9-1nnp-67cc
23
vulnerability VCID-ggtj-fbzy-87fx
24
vulnerability VCID-gzga-qjaf-kugh
25
vulnerability VCID-kfct-k5af-n7fu
26
vulnerability VCID-kjc9-vrhf-hfav
27
vulnerability VCID-mccb-abc5-9yfs
28
vulnerability VCID-ngx2-ewzf-xbd4
29
vulnerability VCID-ntst-nee5-63d3
30
vulnerability VCID-pb4n-m8cv-9bb7
31
vulnerability VCID-pfvk-8q6r-e7c5
32
vulnerability VCID-psnm-zaza-tuf9
33
vulnerability VCID-pu8a-r3v2-g7h9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-rw4d-b9yt-mbhz
37
vulnerability VCID-s45p-jru3-w3df
38
vulnerability VCID-t4gd-uv9g-ukh5
39
vulnerability VCID-twda-bvut-9bhp
40
vulnerability VCID-u9vz-axk1-fqfn
41
vulnerability VCID-vgz6-nvj3-xqft
42
vulnerability VCID-wxkj-7zgv-x7bc
43
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p7
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
4
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39409, GHSA-rf4q-m23c-7q8r
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4b5p-wqtj-7kbe
5
url VCID-549e-3kmc-cyfw
vulnerability_id VCID-549e-3kmc-cyfw
summary Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access, leading to both confidentiality and integrity impact. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34104
reference_id
reference_type
scores
0
value 0.00617
scoring_system epss
scoring_elements 0.7054
published_at 2026-06-13T12:55:00Z
1
value 0.00617
scoring_system epss
scoring_elements 0.70435
published_at 2026-06-11T12:55:00Z
2
value 0.00617
scoring_system epss
scoring_elements 0.70526
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34104
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
3
reference_url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
4
reference_url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
5
reference_url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
6
reference_url https://helpx.adobe.com/security/products/magento/apsb24-40.html
reference_id apsb24-40.html
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-06-14T13:48:20Z/
url https://helpx.adobe.com/security/products/magento/apsb24-40.html
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34104
reference_id CVE-2024-34104
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34104
8
reference_url https://github.com/advisories/GHSA-wwj3-573j-rvvm
reference_id GHSA-wwj3-573j-rvvm
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wwj3-573j-rvvm
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p9
purl pkg:composer/magento/community-edition@2.4.4-p9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gakd-m2af-z7c2
7
vulnerability VCID-gx3s-7cxk-pyfc
8
vulnerability VCID-h2ju-dedu-fqad
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-xgh4-b9yn-dkh4
13
vulnerability VCID-xjd4-w9bn-mbex
14
vulnerability VCID-xqc4-jf6e-abfg
15
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p9
1
url pkg:composer/magento/community-edition@2.4.5-p8
purl pkg:composer/magento/community-edition@2.4.5-p8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-2t3q-pmg5-qyhn
2
vulnerability VCID-368r-um85-k3d2
3
vulnerability VCID-3s5p-wb18-13ge
4
vulnerability VCID-3uj4-thpr-cue1
5
vulnerability VCID-3ydj-usv4-47fq
6
vulnerability VCID-4b5p-wqtj-7kbe
7
vulnerability VCID-4nqq-nrne-17a2
8
vulnerability VCID-6v47-xgpq-zkgf
9
vulnerability VCID-7bmk-3ab2-9ba6
10
vulnerability VCID-8365-zgh2-w3cc
11
vulnerability VCID-bftg-2sea-57cv
12
vulnerability VCID-dsy7-gm7v-tqc8
13
vulnerability VCID-eusf-bc81-9uhv
14
vulnerability VCID-gxbc-u5mr-f3c9
15
vulnerability VCID-h2ju-dedu-fqad
16
vulnerability VCID-j9e4-4xta-6qc5
17
vulnerability VCID-jeur-3jww-dqee
18
vulnerability VCID-jyhf-huep-tya2
19
vulnerability VCID-pcm6-819d-6uhm
20
vulnerability VCID-qbx1-jqke-v7hf
21
vulnerability VCID-qnpc-4r4b-3uhx
22
vulnerability VCID-s7t9-h2jx-9bgr
23
vulnerability VCID-u52p-wrjp-quhk
24
vulnerability VCID-vwpg-z9en-6yej
25
vulnerability VCID-wfdz-b6c4-quhq
26
vulnerability VCID-xmby-7b1y-v3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p8
2
url pkg:composer/magento/community-edition@2.4.6-p6
purl pkg:composer/magento/community-edition@2.4.6-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-4b5p-wqtj-7kbe
13
vulnerability VCID-5edy-fp8q-97fp
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-9gbf-swtt-7bhz
20
vulnerability VCID-a6gj-zm14-aqhq
21
vulnerability VCID-ax9q-y1rb-33b2
22
vulnerability VCID-bfp1-cndf-d7d7
23
vulnerability VCID-bftg-2sea-57cv
24
vulnerability VCID-ctrj-y3d6-a7dv
25
vulnerability VCID-cyy2-3rr3-jkc8
26
vulnerability VCID-d9zc-rh9p-4bde
27
vulnerability VCID-dktm-v3jw-f7de
28
vulnerability VCID-dsy7-gm7v-tqc8
29
vulnerability VCID-dytj-h56v-bke9
30
vulnerability VCID-e2t8-b5yy-zkhn
31
vulnerability VCID-esjc-zzqy-nycf
32
vulnerability VCID-ferd-u8gt-akds
33
vulnerability VCID-gac9-1nnp-67cc
34
vulnerability VCID-ggtj-fbzy-87fx
35
vulnerability VCID-gxbc-u5mr-f3c9
36
vulnerability VCID-gzga-qjaf-kugh
37
vulnerability VCID-j9e4-4xta-6qc5
38
vulnerability VCID-jeur-3jww-dqee
39
vulnerability VCID-jyhf-huep-tya2
40
vulnerability VCID-kfct-k5af-n7fu
41
vulnerability VCID-kjc9-vrhf-hfav
42
vulnerability VCID-mccb-abc5-9yfs
43
vulnerability VCID-ngx2-ewzf-xbd4
44
vulnerability VCID-ntst-nee5-63d3
45
vulnerability VCID-pb4n-m8cv-9bb7
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-qbx1-jqke-v7hf
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-qnpc-4r4b-3uhx
52
vulnerability VCID-rm7u-jwat-v7f1
53
vulnerability VCID-rw4d-b9yt-mbhz
54
vulnerability VCID-s45p-jru3-w3df
55
vulnerability VCID-s7t9-h2jx-9bgr
56
vulnerability VCID-t4gd-uv9g-ukh5
57
vulnerability VCID-twda-bvut-9bhp
58
vulnerability VCID-u52p-wrjp-quhk
59
vulnerability VCID-u9vz-axk1-fqfn
60
vulnerability VCID-vgz6-nvj3-xqft
61
vulnerability VCID-vwpg-z9en-6yej
62
vulnerability VCID-wfdz-b6c4-quhq
63
vulnerability VCID-wxkj-7zgv-x7bc
64
vulnerability VCID-xmby-7b1y-v3cn
65
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p6
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2024-34104, GHSA-wwj3-573j-rvvm
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-549e-3kmc-cyfw
6
url VCID-6gtw-hr2w-5fcd
vulnerability_id VCID-6gtw-hr2w-5fcd
summary Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Incorrect Authorization vulnerability that could lead to a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access other user's data. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38209
reference_id
reference_type
scores
0
value 0.00202
scoring_system epss
scoring_elements 0.42413
published_at 2026-06-13T12:55:00Z
1
value 0.00202
scoring_system epss
scoring_elements 0.42226
published_at 2026-06-11T12:55:00Z
2
value 0.00202
scoring_system epss
scoring_elements 0.42391
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38209
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 4.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38209
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 4.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-38209
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-42.html
reference_id apsb23-42.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 4.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T21:50:38Z/
url https://helpx.adobe.com/security/products/magento/apsb23-42.html
4
reference_url https://github.com/advisories/GHSA-3vg2-v639-6ch9
reference_id GHSA-3vg2-v639-6ch9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3vg2-v639-6ch9
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p5
purl pkg:composer/magento/community-edition@2.4.4-p5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-466x-mpt9-gbgy
2
vulnerability VCID-4nqq-nrne-17a2
3
vulnerability VCID-549e-3kmc-cyfw
4
vulnerability VCID-6d1u-exkw-hbfu
5
vulnerability VCID-7bmk-3ab2-9ba6
6
vulnerability VCID-8hfe-bt2u-37f9
7
vulnerability VCID-96hr-sbyj-27dw
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-e9g4-n5c8-6yf9
10
vulnerability VCID-eban-ja9z-f7ep
11
vulnerability VCID-eusf-bc81-9uhv
12
vulnerability VCID-fb5x-afrq-87aj
13
vulnerability VCID-fqkf-67fw-cyb8
14
vulnerability VCID-frhp-vgpt-g7am
15
vulnerability VCID-fz2x-ms14-pkfs
16
vulnerability VCID-gakd-m2af-z7c2
17
vulnerability VCID-gx3s-7cxk-pyfc
18
vulnerability VCID-h2ju-dedu-fqad
19
vulnerability VCID-jkrp-j7st-27f3
20
vulnerability VCID-jnuu-9mt7-jyd5
21
vulnerability VCID-kf6b-mshs-23fa
22
vulnerability VCID-ktnj-j4xu-uufs
23
vulnerability VCID-pcm6-819d-6uhm
24
vulnerability VCID-pzjb-n7ah-ffcg
25
vulnerability VCID-q12a-kwpk-yufv
26
vulnerability VCID-qr8w-qwb5-6uag
27
vulnerability VCID-twdq-g82m-nqcp
28
vulnerability VCID-xgh4-b9yn-dkh4
29
vulnerability VCID-xgk2-yecx-q3ff
30
vulnerability VCID-xjd4-w9bn-mbex
31
vulnerability VCID-xqc4-jf6e-abfg
32
vulnerability VCID-z97t-ffda-vfes
33
vulnerability VCID-zssu-1dmn-sycb
34
vulnerability VCID-zthr-mpwx-1fef
35
vulnerability VCID-zv6m-4py8-3ydq
36
vulnerability VCID-zwem-swqk-1kaz
37
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p5
1
url pkg:composer/magento/community-edition@2.4.5-p4
purl pkg:composer/magento/community-edition@2.4.5-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-368r-um85-k3d2
4
vulnerability VCID-3s5p-wb18-13ge
5
vulnerability VCID-3uj4-thpr-cue1
6
vulnerability VCID-3ydj-usv4-47fq
7
vulnerability VCID-466x-mpt9-gbgy
8
vulnerability VCID-4b5p-wqtj-7kbe
9
vulnerability VCID-4nqq-nrne-17a2
10
vulnerability VCID-549e-3kmc-cyfw
11
vulnerability VCID-6v47-xgpq-zkgf
12
vulnerability VCID-7bmk-3ab2-9ba6
13
vulnerability VCID-8365-zgh2-w3cc
14
vulnerability VCID-8hfe-bt2u-37f9
15
vulnerability VCID-96hr-sbyj-27dw
16
vulnerability VCID-bftg-2sea-57cv
17
vulnerability VCID-dsy7-gm7v-tqc8
18
vulnerability VCID-e9g4-n5c8-6yf9
19
vulnerability VCID-eban-ja9z-f7ep
20
vulnerability VCID-eusf-bc81-9uhv
21
vulnerability VCID-fb5x-afrq-87aj
22
vulnerability VCID-frhp-vgpt-g7am
23
vulnerability VCID-fz2x-ms14-pkfs
24
vulnerability VCID-gxbc-u5mr-f3c9
25
vulnerability VCID-h2ju-dedu-fqad
26
vulnerability VCID-j9e4-4xta-6qc5
27
vulnerability VCID-jeur-3jww-dqee
28
vulnerability VCID-jkrp-j7st-27f3
29
vulnerability VCID-jnuu-9mt7-jyd5
30
vulnerability VCID-jyhf-huep-tya2
31
vulnerability VCID-kf6b-mshs-23fa
32
vulnerability VCID-pcm6-819d-6uhm
33
vulnerability VCID-pzjb-n7ah-ffcg
34
vulnerability VCID-q12a-kwpk-yufv
35
vulnerability VCID-qbx1-jqke-v7hf
36
vulnerability VCID-qnpc-4r4b-3uhx
37
vulnerability VCID-qr8w-qwb5-6uag
38
vulnerability VCID-s7t9-h2jx-9bgr
39
vulnerability VCID-u52p-wrjp-quhk
40
vulnerability VCID-vwpg-z9en-6yej
41
vulnerability VCID-wfdz-b6c4-quhq
42
vulnerability VCID-xgk2-yecx-q3ff
43
vulnerability VCID-xmby-7b1y-v3cn
44
vulnerability VCID-zssu-1dmn-sycb
45
vulnerability VCID-zthr-mpwx-1fef
46
vulnerability VCID-zv6m-4py8-3ydq
47
vulnerability VCID-zwem-swqk-1kaz
48
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p4
2
url pkg:composer/magento/community-edition@2.4.6-p2
purl pkg:composer/magento/community-edition@2.4.6-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-313z-h2v4-c3fr
8
vulnerability VCID-368r-um85-k3d2
9
vulnerability VCID-3a8p-9krx-23e8
10
vulnerability VCID-3s5p-wb18-13ge
11
vulnerability VCID-3uj4-thpr-cue1
12
vulnerability VCID-3ydj-usv4-47fq
13
vulnerability VCID-466x-mpt9-gbgy
14
vulnerability VCID-4b5p-wqtj-7kbe
15
vulnerability VCID-549e-3kmc-cyfw
16
vulnerability VCID-5edy-fp8q-97fp
17
vulnerability VCID-6v47-xgpq-zkgf
18
vulnerability VCID-78hy-q8kh-kyh7
19
vulnerability VCID-7j68-gund-4qhp
20
vulnerability VCID-8365-zgh2-w3cc
21
vulnerability VCID-8gwb-c3ck-37f8
22
vulnerability VCID-8hfe-bt2u-37f9
23
vulnerability VCID-96hr-sbyj-27dw
24
vulnerability VCID-9gbf-swtt-7bhz
25
vulnerability VCID-a6gj-zm14-aqhq
26
vulnerability VCID-ax9q-y1rb-33b2
27
vulnerability VCID-bfp1-cndf-d7d7
28
vulnerability VCID-bftg-2sea-57cv
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-eban-ja9z-f7ep
38
vulnerability VCID-esjc-zzqy-nycf
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-frhp-vgpt-g7am
42
vulnerability VCID-fz2x-ms14-pkfs
43
vulnerability VCID-gac9-1nnp-67cc
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gxbc-u5mr-f3c9
46
vulnerability VCID-gzga-qjaf-kugh
47
vulnerability VCID-j9e4-4xta-6qc5
48
vulnerability VCID-jeur-3jww-dqee
49
vulnerability VCID-jkrp-j7st-27f3
50
vulnerability VCID-jnuu-9mt7-jyd5
51
vulnerability VCID-jyhf-huep-tya2
52
vulnerability VCID-kf6b-mshs-23fa
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-mccb-abc5-9yfs
56
vulnerability VCID-ngx2-ewzf-xbd4
57
vulnerability VCID-ntst-nee5-63d3
58
vulnerability VCID-pb4n-m8cv-9bb7
59
vulnerability VCID-pfvk-8q6r-e7c5
60
vulnerability VCID-psnm-zaza-tuf9
61
vulnerability VCID-pu8a-r3v2-g7h9
62
vulnerability VCID-pzjb-n7ah-ffcg
63
vulnerability VCID-q12a-kwpk-yufv
64
vulnerability VCID-qbx1-jqke-v7hf
65
vulnerability VCID-qh9p-8b9r-mufh
66
vulnerability VCID-qnpc-4r4b-3uhx
67
vulnerability VCID-qr8w-qwb5-6uag
68
vulnerability VCID-rm7u-jwat-v7f1
69
vulnerability VCID-rw4d-b9yt-mbhz
70
vulnerability VCID-s45p-jru3-w3df
71
vulnerability VCID-s7t9-h2jx-9bgr
72
vulnerability VCID-t4gd-uv9g-ukh5
73
vulnerability VCID-twda-bvut-9bhp
74
vulnerability VCID-u52p-wrjp-quhk
75
vulnerability VCID-u9vz-axk1-fqfn
76
vulnerability VCID-vgz6-nvj3-xqft
77
vulnerability VCID-vwpg-z9en-6yej
78
vulnerability VCID-wfdz-b6c4-quhq
79
vulnerability VCID-wxkj-7zgv-x7bc
80
vulnerability VCID-xgk2-yecx-q3ff
81
vulnerability VCID-xmby-7b1y-v3cn
82
vulnerability VCID-za87-d5x9-wuby
83
vulnerability VCID-zssu-1dmn-sycb
84
vulnerability VCID-zthr-mpwx-1fef
85
vulnerability VCID-zv6m-4py8-3ydq
86
vulnerability VCID-zwem-swqk-1kaz
87
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p2
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-38209, GHSA-3vg2-v639-6ch9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6gtw-hr2w-5fcd
7
url VCID-7hqr-a671-wfhq
vulnerability_id VCID-7hqr-a671-wfhq
summary Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29292
reference_id
reference_type
scores
0
value 0.00469
scoring_system epss
scoring_elements 0.65107
published_at 2026-06-12T12:55:00Z
1
value 0.00469
scoring_system epss
scoring_elements 0.65118
published_at 2026-06-13T12:55:00Z
2
value 0.00469
scoring_system epss
scoring_elements 0.65007
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29292
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29292
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29292
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id apsb23-35.html
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-05T18:36:16Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
4
reference_url https://github.com/advisories/GHSA-4588-7x48-jrgj
reference_id GHSA-4588-7x48-jrgj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4588-7x48-jrgj
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-2tge-6ken-kqge
2
vulnerability VCID-466x-mpt9-gbgy
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-549e-3kmc-cyfw
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-6gtw-hr2w-5fcd
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-8hfe-bt2u-37f9
9
vulnerability VCID-96hr-sbyj-27dw
10
vulnerability VCID-9gb1-p5qf-3kd2
11
vulnerability VCID-afft-etfr-n3ep
12
vulnerability VCID-e9g4-n5c8-6yf9
13
vulnerability VCID-eban-ja9z-f7ep
14
vulnerability VCID-eusf-bc81-9uhv
15
vulnerability VCID-fb5x-afrq-87aj
16
vulnerability VCID-fqkf-67fw-cyb8
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-fz2x-ms14-pkfs
19
vulnerability VCID-gakd-m2af-z7c2
20
vulnerability VCID-gx3s-7cxk-pyfc
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jkrp-j7st-27f3
23
vulnerability VCID-jnuu-9mt7-jyd5
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-ktnj-j4xu-uufs
26
vulnerability VCID-pcm6-819d-6uhm
27
vulnerability VCID-pzjb-n7ah-ffcg
28
vulnerability VCID-q12a-kwpk-yufv
29
vulnerability VCID-qr8w-qwb5-6uag
30
vulnerability VCID-twdq-g82m-nqcp
31
vulnerability VCID-xgh4-b9yn-dkh4
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xjd4-w9bn-mbex
34
vulnerability VCID-xqc4-jf6e-abfg
35
vulnerability VCID-z97t-ffda-vfes
36
vulnerability VCID-zssu-1dmn-sycb
37
vulnerability VCID-zthr-mpwx-1fef
38
vulnerability VCID-zv6m-4py8-3ydq
39
vulnerability VCID-zwem-swqk-1kaz
40
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-2tge-6ken-kqge
4
vulnerability VCID-368r-um85-k3d2
5
vulnerability VCID-3s5p-wb18-13ge
6
vulnerability VCID-3uj4-thpr-cue1
7
vulnerability VCID-3ydj-usv4-47fq
8
vulnerability VCID-466x-mpt9-gbgy
9
vulnerability VCID-4b5p-wqtj-7kbe
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-549e-3kmc-cyfw
12
vulnerability VCID-6gtw-hr2w-5fcd
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-7bmk-3ab2-9ba6
15
vulnerability VCID-8365-zgh2-w3cc
16
vulnerability VCID-8hfe-bt2u-37f9
17
vulnerability VCID-96hr-sbyj-27dw
18
vulnerability VCID-afft-etfr-n3ep
19
vulnerability VCID-bftg-2sea-57cv
20
vulnerability VCID-dsy7-gm7v-tqc8
21
vulnerability VCID-e9g4-n5c8-6yf9
22
vulnerability VCID-eban-ja9z-f7ep
23
vulnerability VCID-eusf-bc81-9uhv
24
vulnerability VCID-fb5x-afrq-87aj
25
vulnerability VCID-frhp-vgpt-g7am
26
vulnerability VCID-fz2x-ms14-pkfs
27
vulnerability VCID-gxbc-u5mr-f3c9
28
vulnerability VCID-h2ju-dedu-fqad
29
vulnerability VCID-j9e4-4xta-6qc5
30
vulnerability VCID-jeur-3jww-dqee
31
vulnerability VCID-jkrp-j7st-27f3
32
vulnerability VCID-jnuu-9mt7-jyd5
33
vulnerability VCID-jyhf-huep-tya2
34
vulnerability VCID-kf6b-mshs-23fa
35
vulnerability VCID-pcm6-819d-6uhm
36
vulnerability VCID-pzjb-n7ah-ffcg
37
vulnerability VCID-q12a-kwpk-yufv
38
vulnerability VCID-qbx1-jqke-v7hf
39
vulnerability VCID-qnpc-4r4b-3uhx
40
vulnerability VCID-qr8w-qwb5-6uag
41
vulnerability VCID-s7t9-h2jx-9bgr
42
vulnerability VCID-u52p-wrjp-quhk
43
vulnerability VCID-vwpg-z9en-6yej
44
vulnerability VCID-wfdz-b6c4-quhq
45
vulnerability VCID-xgk2-yecx-q3ff
46
vulnerability VCID-xmby-7b1y-v3cn
47
vulnerability VCID-zssu-1dmn-sycb
48
vulnerability VCID-zthr-mpwx-1fef
49
vulnerability VCID-zv6m-4py8-3ydq
50
vulnerability VCID-zwem-swqk-1kaz
51
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
2
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-2tge-6ken-kqge
8
vulnerability VCID-313z-h2v4-c3fr
9
vulnerability VCID-368r-um85-k3d2
10
vulnerability VCID-3a8p-9krx-23e8
11
vulnerability VCID-3s5p-wb18-13ge
12
vulnerability VCID-3uj4-thpr-cue1
13
vulnerability VCID-3ydj-usv4-47fq
14
vulnerability VCID-466x-mpt9-gbgy
15
vulnerability VCID-4b5p-wqtj-7kbe
16
vulnerability VCID-4nqq-nrne-17a2
17
vulnerability VCID-53sd-5nuj-e7d9
18
vulnerability VCID-549e-3kmc-cyfw
19
vulnerability VCID-5edy-fp8q-97fp
20
vulnerability VCID-6d1u-exkw-hbfu
21
vulnerability VCID-6gtw-hr2w-5fcd
22
vulnerability VCID-6v47-xgpq-zkgf
23
vulnerability VCID-78hy-q8kh-kyh7
24
vulnerability VCID-7bmk-3ab2-9ba6
25
vulnerability VCID-7j68-gund-4qhp
26
vulnerability VCID-8365-zgh2-w3cc
27
vulnerability VCID-8gwb-c3ck-37f8
28
vulnerability VCID-8hfe-bt2u-37f9
29
vulnerability VCID-96hr-sbyj-27dw
30
vulnerability VCID-9gb1-p5qf-3kd2
31
vulnerability VCID-9gbf-swtt-7bhz
32
vulnerability VCID-a6gj-zm14-aqhq
33
vulnerability VCID-afft-etfr-n3ep
34
vulnerability VCID-ax9q-y1rb-33b2
35
vulnerability VCID-bfp1-cndf-d7d7
36
vulnerability VCID-bftg-2sea-57cv
37
vulnerability VCID-bvfd-gs5b-dyg7
38
vulnerability VCID-ctrj-y3d6-a7dv
39
vulnerability VCID-cyy2-3rr3-jkc8
40
vulnerability VCID-d9zc-rh9p-4bde
41
vulnerability VCID-dktm-v3jw-f7de
42
vulnerability VCID-dsy7-gm7v-tqc8
43
vulnerability VCID-dytj-h56v-bke9
44
vulnerability VCID-e2t8-b5yy-zkhn
45
vulnerability VCID-e9g4-n5c8-6yf9
46
vulnerability VCID-eban-ja9z-f7ep
47
vulnerability VCID-esjc-zzqy-nycf
48
vulnerability VCID-eusf-bc81-9uhv
49
vulnerability VCID-fb5x-afrq-87aj
50
vulnerability VCID-ferd-u8gt-akds
51
vulnerability VCID-fqkf-67fw-cyb8
52
vulnerability VCID-frhp-vgpt-g7am
53
vulnerability VCID-fz2x-ms14-pkfs
54
vulnerability VCID-gac9-1nnp-67cc
55
vulnerability VCID-gakd-m2af-z7c2
56
vulnerability VCID-ggtj-fbzy-87fx
57
vulnerability VCID-gx3s-7cxk-pyfc
58
vulnerability VCID-gxbc-u5mr-f3c9
59
vulnerability VCID-gzga-qjaf-kugh
60
vulnerability VCID-h2ju-dedu-fqad
61
vulnerability VCID-j9e4-4xta-6qc5
62
vulnerability VCID-jc6r-vmnc-r3g9
63
vulnerability VCID-jeur-3jww-dqee
64
vulnerability VCID-jkrp-j7st-27f3
65
vulnerability VCID-jnuu-9mt7-jyd5
66
vulnerability VCID-jyhf-huep-tya2
67
vulnerability VCID-kf6b-mshs-23fa
68
vulnerability VCID-kfct-k5af-n7fu
69
vulnerability VCID-kjc9-vrhf-hfav
70
vulnerability VCID-ktnj-j4xu-uufs
71
vulnerability VCID-kxjv-xm7r-hkhs
72
vulnerability VCID-mccb-abc5-9yfs
73
vulnerability VCID-ngx2-ewzf-xbd4
74
vulnerability VCID-ntst-nee5-63d3
75
vulnerability VCID-pb4n-m8cv-9bb7
76
vulnerability VCID-pcm6-819d-6uhm
77
vulnerability VCID-pfvk-8q6r-e7c5
78
vulnerability VCID-psnm-zaza-tuf9
79
vulnerability VCID-pu8a-r3v2-g7h9
80
vulnerability VCID-pzjb-n7ah-ffcg
81
vulnerability VCID-q12a-kwpk-yufv
82
vulnerability VCID-q68u-w433-tqb9
83
vulnerability VCID-qbx1-jqke-v7hf
84
vulnerability VCID-qh9p-8b9r-mufh
85
vulnerability VCID-qnpc-4r4b-3uhx
86
vulnerability VCID-qr8w-qwb5-6uag
87
vulnerability VCID-rm7u-jwat-v7f1
88
vulnerability VCID-rw4d-b9yt-mbhz
89
vulnerability VCID-s45p-jru3-w3df
90
vulnerability VCID-s7t9-h2jx-9bgr
91
vulnerability VCID-t4gd-uv9g-ukh5
92
vulnerability VCID-twda-bvut-9bhp
93
vulnerability VCID-twdq-g82m-nqcp
94
vulnerability VCID-u52p-wrjp-quhk
95
vulnerability VCID-u9vz-axk1-fqfn
96
vulnerability VCID-vgz6-nvj3-xqft
97
vulnerability VCID-vwpg-z9en-6yej
98
vulnerability VCID-wfdz-b6c4-quhq
99
vulnerability VCID-wxkj-7zgv-x7bc
100
vulnerability VCID-xgh4-b9yn-dkh4
101
vulnerability VCID-xgk2-yecx-q3ff
102
vulnerability VCID-xjd4-w9bn-mbex
103
vulnerability VCID-xmby-7b1y-v3cn
104
vulnerability VCID-xqc4-jf6e-abfg
105
vulnerability VCID-z97t-ffda-vfes
106
vulnerability VCID-za87-d5x9-wuby
107
vulnerability VCID-zssu-1dmn-sycb
108
vulnerability VCID-zthr-mpwx-1fef
109
vulnerability VCID-zv6m-4py8-3ydq
110
vulnerability VCID-zwem-swqk-1kaz
111
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-29292, GHSA-4588-7x48-jrgj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7hqr-a671-wfhq
8
url VCID-8r3a-tuwb-k3f5
vulnerability_id VCID-8r3a-tuwb-k3f5
summary Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29291
reference_id
reference_type
scores
0
value 0.00566
scoring_system epss
scoring_elements 0.69035
published_at 2026-06-12T12:55:00Z
1
value 0.00566
scoring_system epss
scoring_elements 0.69047
published_at 2026-06-13T12:55:00Z
2
value 0.00566
scoring_system epss
scoring_elements 0.68942
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29291
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29291
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29291
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id apsb23-35.html
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-05T18:36:20Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
4
reference_url https://github.com/advisories/GHSA-5f79-vhr4-vw2r
reference_id GHSA-5f79-vhr4-vw2r
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5f79-vhr4-vw2r
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-2tge-6ken-kqge
2
vulnerability VCID-466x-mpt9-gbgy
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-549e-3kmc-cyfw
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-6gtw-hr2w-5fcd
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-8hfe-bt2u-37f9
9
vulnerability VCID-96hr-sbyj-27dw
10
vulnerability VCID-9gb1-p5qf-3kd2
11
vulnerability VCID-afft-etfr-n3ep
12
vulnerability VCID-e9g4-n5c8-6yf9
13
vulnerability VCID-eban-ja9z-f7ep
14
vulnerability VCID-eusf-bc81-9uhv
15
vulnerability VCID-fb5x-afrq-87aj
16
vulnerability VCID-fqkf-67fw-cyb8
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-fz2x-ms14-pkfs
19
vulnerability VCID-gakd-m2af-z7c2
20
vulnerability VCID-gx3s-7cxk-pyfc
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jkrp-j7st-27f3
23
vulnerability VCID-jnuu-9mt7-jyd5
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-ktnj-j4xu-uufs
26
vulnerability VCID-pcm6-819d-6uhm
27
vulnerability VCID-pzjb-n7ah-ffcg
28
vulnerability VCID-q12a-kwpk-yufv
29
vulnerability VCID-qr8w-qwb5-6uag
30
vulnerability VCID-twdq-g82m-nqcp
31
vulnerability VCID-xgh4-b9yn-dkh4
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xjd4-w9bn-mbex
34
vulnerability VCID-xqc4-jf6e-abfg
35
vulnerability VCID-z97t-ffda-vfes
36
vulnerability VCID-zssu-1dmn-sycb
37
vulnerability VCID-zthr-mpwx-1fef
38
vulnerability VCID-zv6m-4py8-3ydq
39
vulnerability VCID-zwem-swqk-1kaz
40
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-2tge-6ken-kqge
4
vulnerability VCID-368r-um85-k3d2
5
vulnerability VCID-3s5p-wb18-13ge
6
vulnerability VCID-3uj4-thpr-cue1
7
vulnerability VCID-3ydj-usv4-47fq
8
vulnerability VCID-466x-mpt9-gbgy
9
vulnerability VCID-4b5p-wqtj-7kbe
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-549e-3kmc-cyfw
12
vulnerability VCID-6gtw-hr2w-5fcd
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-7bmk-3ab2-9ba6
15
vulnerability VCID-8365-zgh2-w3cc
16
vulnerability VCID-8hfe-bt2u-37f9
17
vulnerability VCID-96hr-sbyj-27dw
18
vulnerability VCID-afft-etfr-n3ep
19
vulnerability VCID-bftg-2sea-57cv
20
vulnerability VCID-dsy7-gm7v-tqc8
21
vulnerability VCID-e9g4-n5c8-6yf9
22
vulnerability VCID-eban-ja9z-f7ep
23
vulnerability VCID-eusf-bc81-9uhv
24
vulnerability VCID-fb5x-afrq-87aj
25
vulnerability VCID-frhp-vgpt-g7am
26
vulnerability VCID-fz2x-ms14-pkfs
27
vulnerability VCID-gxbc-u5mr-f3c9
28
vulnerability VCID-h2ju-dedu-fqad
29
vulnerability VCID-j9e4-4xta-6qc5
30
vulnerability VCID-jeur-3jww-dqee
31
vulnerability VCID-jkrp-j7st-27f3
32
vulnerability VCID-jnuu-9mt7-jyd5
33
vulnerability VCID-jyhf-huep-tya2
34
vulnerability VCID-kf6b-mshs-23fa
35
vulnerability VCID-pcm6-819d-6uhm
36
vulnerability VCID-pzjb-n7ah-ffcg
37
vulnerability VCID-q12a-kwpk-yufv
38
vulnerability VCID-qbx1-jqke-v7hf
39
vulnerability VCID-qnpc-4r4b-3uhx
40
vulnerability VCID-qr8w-qwb5-6uag
41
vulnerability VCID-s7t9-h2jx-9bgr
42
vulnerability VCID-u52p-wrjp-quhk
43
vulnerability VCID-vwpg-z9en-6yej
44
vulnerability VCID-wfdz-b6c4-quhq
45
vulnerability VCID-xgk2-yecx-q3ff
46
vulnerability VCID-xmby-7b1y-v3cn
47
vulnerability VCID-zssu-1dmn-sycb
48
vulnerability VCID-zthr-mpwx-1fef
49
vulnerability VCID-zv6m-4py8-3ydq
50
vulnerability VCID-zwem-swqk-1kaz
51
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
2
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-2tge-6ken-kqge
8
vulnerability VCID-313z-h2v4-c3fr
9
vulnerability VCID-368r-um85-k3d2
10
vulnerability VCID-3a8p-9krx-23e8
11
vulnerability VCID-3s5p-wb18-13ge
12
vulnerability VCID-3uj4-thpr-cue1
13
vulnerability VCID-3ydj-usv4-47fq
14
vulnerability VCID-466x-mpt9-gbgy
15
vulnerability VCID-4b5p-wqtj-7kbe
16
vulnerability VCID-4nqq-nrne-17a2
17
vulnerability VCID-53sd-5nuj-e7d9
18
vulnerability VCID-549e-3kmc-cyfw
19
vulnerability VCID-5edy-fp8q-97fp
20
vulnerability VCID-6d1u-exkw-hbfu
21
vulnerability VCID-6gtw-hr2w-5fcd
22
vulnerability VCID-6v47-xgpq-zkgf
23
vulnerability VCID-78hy-q8kh-kyh7
24
vulnerability VCID-7bmk-3ab2-9ba6
25
vulnerability VCID-7j68-gund-4qhp
26
vulnerability VCID-8365-zgh2-w3cc
27
vulnerability VCID-8gwb-c3ck-37f8
28
vulnerability VCID-8hfe-bt2u-37f9
29
vulnerability VCID-96hr-sbyj-27dw
30
vulnerability VCID-9gb1-p5qf-3kd2
31
vulnerability VCID-9gbf-swtt-7bhz
32
vulnerability VCID-a6gj-zm14-aqhq
33
vulnerability VCID-afft-etfr-n3ep
34
vulnerability VCID-ax9q-y1rb-33b2
35
vulnerability VCID-bfp1-cndf-d7d7
36
vulnerability VCID-bftg-2sea-57cv
37
vulnerability VCID-bvfd-gs5b-dyg7
38
vulnerability VCID-ctrj-y3d6-a7dv
39
vulnerability VCID-cyy2-3rr3-jkc8
40
vulnerability VCID-d9zc-rh9p-4bde
41
vulnerability VCID-dktm-v3jw-f7de
42
vulnerability VCID-dsy7-gm7v-tqc8
43
vulnerability VCID-dytj-h56v-bke9
44
vulnerability VCID-e2t8-b5yy-zkhn
45
vulnerability VCID-e9g4-n5c8-6yf9
46
vulnerability VCID-eban-ja9z-f7ep
47
vulnerability VCID-esjc-zzqy-nycf
48
vulnerability VCID-eusf-bc81-9uhv
49
vulnerability VCID-fb5x-afrq-87aj
50
vulnerability VCID-ferd-u8gt-akds
51
vulnerability VCID-fqkf-67fw-cyb8
52
vulnerability VCID-frhp-vgpt-g7am
53
vulnerability VCID-fz2x-ms14-pkfs
54
vulnerability VCID-gac9-1nnp-67cc
55
vulnerability VCID-gakd-m2af-z7c2
56
vulnerability VCID-ggtj-fbzy-87fx
57
vulnerability VCID-gx3s-7cxk-pyfc
58
vulnerability VCID-gxbc-u5mr-f3c9
59
vulnerability VCID-gzga-qjaf-kugh
60
vulnerability VCID-h2ju-dedu-fqad
61
vulnerability VCID-j9e4-4xta-6qc5
62
vulnerability VCID-jc6r-vmnc-r3g9
63
vulnerability VCID-jeur-3jww-dqee
64
vulnerability VCID-jkrp-j7st-27f3
65
vulnerability VCID-jnuu-9mt7-jyd5
66
vulnerability VCID-jyhf-huep-tya2
67
vulnerability VCID-kf6b-mshs-23fa
68
vulnerability VCID-kfct-k5af-n7fu
69
vulnerability VCID-kjc9-vrhf-hfav
70
vulnerability VCID-ktnj-j4xu-uufs
71
vulnerability VCID-kxjv-xm7r-hkhs
72
vulnerability VCID-mccb-abc5-9yfs
73
vulnerability VCID-ngx2-ewzf-xbd4
74
vulnerability VCID-ntst-nee5-63d3
75
vulnerability VCID-pb4n-m8cv-9bb7
76
vulnerability VCID-pcm6-819d-6uhm
77
vulnerability VCID-pfvk-8q6r-e7c5
78
vulnerability VCID-psnm-zaza-tuf9
79
vulnerability VCID-pu8a-r3v2-g7h9
80
vulnerability VCID-pzjb-n7ah-ffcg
81
vulnerability VCID-q12a-kwpk-yufv
82
vulnerability VCID-q68u-w433-tqb9
83
vulnerability VCID-qbx1-jqke-v7hf
84
vulnerability VCID-qh9p-8b9r-mufh
85
vulnerability VCID-qnpc-4r4b-3uhx
86
vulnerability VCID-qr8w-qwb5-6uag
87
vulnerability VCID-rm7u-jwat-v7f1
88
vulnerability VCID-rw4d-b9yt-mbhz
89
vulnerability VCID-s45p-jru3-w3df
90
vulnerability VCID-s7t9-h2jx-9bgr
91
vulnerability VCID-t4gd-uv9g-ukh5
92
vulnerability VCID-twda-bvut-9bhp
93
vulnerability VCID-twdq-g82m-nqcp
94
vulnerability VCID-u52p-wrjp-quhk
95
vulnerability VCID-u9vz-axk1-fqfn
96
vulnerability VCID-vgz6-nvj3-xqft
97
vulnerability VCID-vwpg-z9en-6yej
98
vulnerability VCID-wfdz-b6c4-quhq
99
vulnerability VCID-wxkj-7zgv-x7bc
100
vulnerability VCID-xgh4-b9yn-dkh4
101
vulnerability VCID-xgk2-yecx-q3ff
102
vulnerability VCID-xjd4-w9bn-mbex
103
vulnerability VCID-xmby-7b1y-v3cn
104
vulnerability VCID-xqc4-jf6e-abfg
105
vulnerability VCID-z97t-ffda-vfes
106
vulnerability VCID-za87-d5x9-wuby
107
vulnerability VCID-zssu-1dmn-sycb
108
vulnerability VCID-zthr-mpwx-1fef
109
vulnerability VCID-zv6m-4py8-3ydq
110
vulnerability VCID-zwem-swqk-1kaz
111
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-29291, GHSA-5f79-vhr4-vw2r
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8r3a-tuwb-k3f5
9
url VCID-afft-etfr-n3ep
vulnerability_id VCID-afft-etfr-n3ep
summary Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by a XML Injection (aka Blind XPath Injection) vulnerability that could lead in minor arbitrary file system read. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38207
reference_id
reference_type
scores
0
value 0.01147
scoring_system epss
scoring_elements 0.78945
published_at 2026-06-12T12:55:00Z
1
value 0.01147
scoring_system epss
scoring_elements 0.78962
published_at 2026-06-13T12:55:00Z
2
value 0.01147
scoring_system epss
scoring_elements 0.78879
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38207
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38207
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-38207
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-42.html
reference_id apsb23-42.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
2
value 2.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
3
value LOW
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-02-26T21:50:21Z/
url https://helpx.adobe.com/security/products/magento/apsb23-42.html
4
reference_url https://github.com/advisories/GHSA-rpv2-g4pc-wp72
reference_id GHSA-rpv2-g4pc-wp72
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rpv2-g4pc-wp72
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p5
purl pkg:composer/magento/community-edition@2.4.4-p5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-466x-mpt9-gbgy
2
vulnerability VCID-4nqq-nrne-17a2
3
vulnerability VCID-549e-3kmc-cyfw
4
vulnerability VCID-6d1u-exkw-hbfu
5
vulnerability VCID-7bmk-3ab2-9ba6
6
vulnerability VCID-8hfe-bt2u-37f9
7
vulnerability VCID-96hr-sbyj-27dw
8
vulnerability VCID-9gb1-p5qf-3kd2
9
vulnerability VCID-e9g4-n5c8-6yf9
10
vulnerability VCID-eban-ja9z-f7ep
11
vulnerability VCID-eusf-bc81-9uhv
12
vulnerability VCID-fb5x-afrq-87aj
13
vulnerability VCID-fqkf-67fw-cyb8
14
vulnerability VCID-frhp-vgpt-g7am
15
vulnerability VCID-fz2x-ms14-pkfs
16
vulnerability VCID-gakd-m2af-z7c2
17
vulnerability VCID-gx3s-7cxk-pyfc
18
vulnerability VCID-h2ju-dedu-fqad
19
vulnerability VCID-jkrp-j7st-27f3
20
vulnerability VCID-jnuu-9mt7-jyd5
21
vulnerability VCID-kf6b-mshs-23fa
22
vulnerability VCID-ktnj-j4xu-uufs
23
vulnerability VCID-pcm6-819d-6uhm
24
vulnerability VCID-pzjb-n7ah-ffcg
25
vulnerability VCID-q12a-kwpk-yufv
26
vulnerability VCID-qr8w-qwb5-6uag
27
vulnerability VCID-twdq-g82m-nqcp
28
vulnerability VCID-xgh4-b9yn-dkh4
29
vulnerability VCID-xgk2-yecx-q3ff
30
vulnerability VCID-xjd4-w9bn-mbex
31
vulnerability VCID-xqc4-jf6e-abfg
32
vulnerability VCID-z97t-ffda-vfes
33
vulnerability VCID-zssu-1dmn-sycb
34
vulnerability VCID-zthr-mpwx-1fef
35
vulnerability VCID-zv6m-4py8-3ydq
36
vulnerability VCID-zwem-swqk-1kaz
37
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p5
1
url pkg:composer/magento/community-edition@2.4.5-p4
purl pkg:composer/magento/community-edition@2.4.5-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-368r-um85-k3d2
4
vulnerability VCID-3s5p-wb18-13ge
5
vulnerability VCID-3uj4-thpr-cue1
6
vulnerability VCID-3ydj-usv4-47fq
7
vulnerability VCID-466x-mpt9-gbgy
8
vulnerability VCID-4b5p-wqtj-7kbe
9
vulnerability VCID-4nqq-nrne-17a2
10
vulnerability VCID-549e-3kmc-cyfw
11
vulnerability VCID-6v47-xgpq-zkgf
12
vulnerability VCID-7bmk-3ab2-9ba6
13
vulnerability VCID-8365-zgh2-w3cc
14
vulnerability VCID-8hfe-bt2u-37f9
15
vulnerability VCID-96hr-sbyj-27dw
16
vulnerability VCID-bftg-2sea-57cv
17
vulnerability VCID-dsy7-gm7v-tqc8
18
vulnerability VCID-e9g4-n5c8-6yf9
19
vulnerability VCID-eban-ja9z-f7ep
20
vulnerability VCID-eusf-bc81-9uhv
21
vulnerability VCID-fb5x-afrq-87aj
22
vulnerability VCID-frhp-vgpt-g7am
23
vulnerability VCID-fz2x-ms14-pkfs
24
vulnerability VCID-gxbc-u5mr-f3c9
25
vulnerability VCID-h2ju-dedu-fqad
26
vulnerability VCID-j9e4-4xta-6qc5
27
vulnerability VCID-jeur-3jww-dqee
28
vulnerability VCID-jkrp-j7st-27f3
29
vulnerability VCID-jnuu-9mt7-jyd5
30
vulnerability VCID-jyhf-huep-tya2
31
vulnerability VCID-kf6b-mshs-23fa
32
vulnerability VCID-pcm6-819d-6uhm
33
vulnerability VCID-pzjb-n7ah-ffcg
34
vulnerability VCID-q12a-kwpk-yufv
35
vulnerability VCID-qbx1-jqke-v7hf
36
vulnerability VCID-qnpc-4r4b-3uhx
37
vulnerability VCID-qr8w-qwb5-6uag
38
vulnerability VCID-s7t9-h2jx-9bgr
39
vulnerability VCID-u52p-wrjp-quhk
40
vulnerability VCID-vwpg-z9en-6yej
41
vulnerability VCID-wfdz-b6c4-quhq
42
vulnerability VCID-xgk2-yecx-q3ff
43
vulnerability VCID-xmby-7b1y-v3cn
44
vulnerability VCID-zssu-1dmn-sycb
45
vulnerability VCID-zthr-mpwx-1fef
46
vulnerability VCID-zv6m-4py8-3ydq
47
vulnerability VCID-zwem-swqk-1kaz
48
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p4
2
url pkg:composer/magento/community-edition@2.4.6-p2
purl pkg:composer/magento/community-edition@2.4.6-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-313z-h2v4-c3fr
8
vulnerability VCID-368r-um85-k3d2
9
vulnerability VCID-3a8p-9krx-23e8
10
vulnerability VCID-3s5p-wb18-13ge
11
vulnerability VCID-3uj4-thpr-cue1
12
vulnerability VCID-3ydj-usv4-47fq
13
vulnerability VCID-466x-mpt9-gbgy
14
vulnerability VCID-4b5p-wqtj-7kbe
15
vulnerability VCID-549e-3kmc-cyfw
16
vulnerability VCID-5edy-fp8q-97fp
17
vulnerability VCID-6v47-xgpq-zkgf
18
vulnerability VCID-78hy-q8kh-kyh7
19
vulnerability VCID-7j68-gund-4qhp
20
vulnerability VCID-8365-zgh2-w3cc
21
vulnerability VCID-8gwb-c3ck-37f8
22
vulnerability VCID-8hfe-bt2u-37f9
23
vulnerability VCID-96hr-sbyj-27dw
24
vulnerability VCID-9gbf-swtt-7bhz
25
vulnerability VCID-a6gj-zm14-aqhq
26
vulnerability VCID-ax9q-y1rb-33b2
27
vulnerability VCID-bfp1-cndf-d7d7
28
vulnerability VCID-bftg-2sea-57cv
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-eban-ja9z-f7ep
38
vulnerability VCID-esjc-zzqy-nycf
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-frhp-vgpt-g7am
42
vulnerability VCID-fz2x-ms14-pkfs
43
vulnerability VCID-gac9-1nnp-67cc
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gxbc-u5mr-f3c9
46
vulnerability VCID-gzga-qjaf-kugh
47
vulnerability VCID-j9e4-4xta-6qc5
48
vulnerability VCID-jeur-3jww-dqee
49
vulnerability VCID-jkrp-j7st-27f3
50
vulnerability VCID-jnuu-9mt7-jyd5
51
vulnerability VCID-jyhf-huep-tya2
52
vulnerability VCID-kf6b-mshs-23fa
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-mccb-abc5-9yfs
56
vulnerability VCID-ngx2-ewzf-xbd4
57
vulnerability VCID-ntst-nee5-63d3
58
vulnerability VCID-pb4n-m8cv-9bb7
59
vulnerability VCID-pfvk-8q6r-e7c5
60
vulnerability VCID-psnm-zaza-tuf9
61
vulnerability VCID-pu8a-r3v2-g7h9
62
vulnerability VCID-pzjb-n7ah-ffcg
63
vulnerability VCID-q12a-kwpk-yufv
64
vulnerability VCID-qbx1-jqke-v7hf
65
vulnerability VCID-qh9p-8b9r-mufh
66
vulnerability VCID-qnpc-4r4b-3uhx
67
vulnerability VCID-qr8w-qwb5-6uag
68
vulnerability VCID-rm7u-jwat-v7f1
69
vulnerability VCID-rw4d-b9yt-mbhz
70
vulnerability VCID-s45p-jru3-w3df
71
vulnerability VCID-s7t9-h2jx-9bgr
72
vulnerability VCID-t4gd-uv9g-ukh5
73
vulnerability VCID-twda-bvut-9bhp
74
vulnerability VCID-u52p-wrjp-quhk
75
vulnerability VCID-u9vz-axk1-fqfn
76
vulnerability VCID-vgz6-nvj3-xqft
77
vulnerability VCID-vwpg-z9en-6yej
78
vulnerability VCID-wfdz-b6c4-quhq
79
vulnerability VCID-wxkj-7zgv-x7bc
80
vulnerability VCID-xgk2-yecx-q3ff
81
vulnerability VCID-xmby-7b1y-v3cn
82
vulnerability VCID-za87-d5x9-wuby
83
vulnerability VCID-zssu-1dmn-sycb
84
vulnerability VCID-zthr-mpwx-1fef
85
vulnerability VCID-zv6m-4py8-3ydq
86
vulnerability VCID-zwem-swqk-1kaz
87
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p2
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-38207, GHSA-rpv2-g4pc-wp72
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-afft-etfr-n3ep
10
url VCID-df8h-8pgg-efg2
vulnerability_id VCID-df8h-8pgg-efg2
summary Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to leak another user's data. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-22248
reference_id
reference_type
scores
0
value 0.00169
scoring_system epss
scoring_elements 0.38101
published_at 2026-06-12T12:55:00Z
1
value 0.00169
scoring_system epss
scoring_elements 0.38126
published_at 2026-06-13T12:55:00Z
2
value 0.00169
scoring_system epss
scoring_elements 0.37925
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-22248
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-22248
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-22248
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id apsb23-35.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value 6.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-05T18:39:10Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
4
reference_url https://github.com/advisories/GHSA-5jfg-phx7-7fxg
reference_id GHSA-5jfg-phx7-7fxg
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5jfg-phx7-7fxg
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-2tge-6ken-kqge
2
vulnerability VCID-466x-mpt9-gbgy
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-549e-3kmc-cyfw
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-6gtw-hr2w-5fcd
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-8hfe-bt2u-37f9
9
vulnerability VCID-96hr-sbyj-27dw
10
vulnerability VCID-9gb1-p5qf-3kd2
11
vulnerability VCID-afft-etfr-n3ep
12
vulnerability VCID-e9g4-n5c8-6yf9
13
vulnerability VCID-eban-ja9z-f7ep
14
vulnerability VCID-eusf-bc81-9uhv
15
vulnerability VCID-fb5x-afrq-87aj
16
vulnerability VCID-fqkf-67fw-cyb8
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-fz2x-ms14-pkfs
19
vulnerability VCID-gakd-m2af-z7c2
20
vulnerability VCID-gx3s-7cxk-pyfc
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jkrp-j7st-27f3
23
vulnerability VCID-jnuu-9mt7-jyd5
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-ktnj-j4xu-uufs
26
vulnerability VCID-pcm6-819d-6uhm
27
vulnerability VCID-pzjb-n7ah-ffcg
28
vulnerability VCID-q12a-kwpk-yufv
29
vulnerability VCID-qr8w-qwb5-6uag
30
vulnerability VCID-twdq-g82m-nqcp
31
vulnerability VCID-xgh4-b9yn-dkh4
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xjd4-w9bn-mbex
34
vulnerability VCID-xqc4-jf6e-abfg
35
vulnerability VCID-z97t-ffda-vfes
36
vulnerability VCID-zssu-1dmn-sycb
37
vulnerability VCID-zthr-mpwx-1fef
38
vulnerability VCID-zv6m-4py8-3ydq
39
vulnerability VCID-zwem-swqk-1kaz
40
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-2tge-6ken-kqge
4
vulnerability VCID-368r-um85-k3d2
5
vulnerability VCID-3s5p-wb18-13ge
6
vulnerability VCID-3uj4-thpr-cue1
7
vulnerability VCID-3ydj-usv4-47fq
8
vulnerability VCID-466x-mpt9-gbgy
9
vulnerability VCID-4b5p-wqtj-7kbe
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-549e-3kmc-cyfw
12
vulnerability VCID-6gtw-hr2w-5fcd
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-7bmk-3ab2-9ba6
15
vulnerability VCID-8365-zgh2-w3cc
16
vulnerability VCID-8hfe-bt2u-37f9
17
vulnerability VCID-96hr-sbyj-27dw
18
vulnerability VCID-afft-etfr-n3ep
19
vulnerability VCID-bftg-2sea-57cv
20
vulnerability VCID-dsy7-gm7v-tqc8
21
vulnerability VCID-e9g4-n5c8-6yf9
22
vulnerability VCID-eban-ja9z-f7ep
23
vulnerability VCID-eusf-bc81-9uhv
24
vulnerability VCID-fb5x-afrq-87aj
25
vulnerability VCID-frhp-vgpt-g7am
26
vulnerability VCID-fz2x-ms14-pkfs
27
vulnerability VCID-gxbc-u5mr-f3c9
28
vulnerability VCID-h2ju-dedu-fqad
29
vulnerability VCID-j9e4-4xta-6qc5
30
vulnerability VCID-jeur-3jww-dqee
31
vulnerability VCID-jkrp-j7st-27f3
32
vulnerability VCID-jnuu-9mt7-jyd5
33
vulnerability VCID-jyhf-huep-tya2
34
vulnerability VCID-kf6b-mshs-23fa
35
vulnerability VCID-pcm6-819d-6uhm
36
vulnerability VCID-pzjb-n7ah-ffcg
37
vulnerability VCID-q12a-kwpk-yufv
38
vulnerability VCID-qbx1-jqke-v7hf
39
vulnerability VCID-qnpc-4r4b-3uhx
40
vulnerability VCID-qr8w-qwb5-6uag
41
vulnerability VCID-s7t9-h2jx-9bgr
42
vulnerability VCID-u52p-wrjp-quhk
43
vulnerability VCID-vwpg-z9en-6yej
44
vulnerability VCID-wfdz-b6c4-quhq
45
vulnerability VCID-xgk2-yecx-q3ff
46
vulnerability VCID-xmby-7b1y-v3cn
47
vulnerability VCID-zssu-1dmn-sycb
48
vulnerability VCID-zthr-mpwx-1fef
49
vulnerability VCID-zv6m-4py8-3ydq
50
vulnerability VCID-zwem-swqk-1kaz
51
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
2
url pkg:composer/magento/community-edition@2.4.5-p4
purl pkg:composer/magento/community-edition@2.4.5-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-368r-um85-k3d2
4
vulnerability VCID-3s5p-wb18-13ge
5
vulnerability VCID-3uj4-thpr-cue1
6
vulnerability VCID-3ydj-usv4-47fq
7
vulnerability VCID-466x-mpt9-gbgy
8
vulnerability VCID-4b5p-wqtj-7kbe
9
vulnerability VCID-4nqq-nrne-17a2
10
vulnerability VCID-549e-3kmc-cyfw
11
vulnerability VCID-6v47-xgpq-zkgf
12
vulnerability VCID-7bmk-3ab2-9ba6
13
vulnerability VCID-8365-zgh2-w3cc
14
vulnerability VCID-8hfe-bt2u-37f9
15
vulnerability VCID-96hr-sbyj-27dw
16
vulnerability VCID-bftg-2sea-57cv
17
vulnerability VCID-dsy7-gm7v-tqc8
18
vulnerability VCID-e9g4-n5c8-6yf9
19
vulnerability VCID-eban-ja9z-f7ep
20
vulnerability VCID-eusf-bc81-9uhv
21
vulnerability VCID-fb5x-afrq-87aj
22
vulnerability VCID-frhp-vgpt-g7am
23
vulnerability VCID-fz2x-ms14-pkfs
24
vulnerability VCID-gxbc-u5mr-f3c9
25
vulnerability VCID-h2ju-dedu-fqad
26
vulnerability VCID-j9e4-4xta-6qc5
27
vulnerability VCID-jeur-3jww-dqee
28
vulnerability VCID-jkrp-j7st-27f3
29
vulnerability VCID-jnuu-9mt7-jyd5
30
vulnerability VCID-jyhf-huep-tya2
31
vulnerability VCID-kf6b-mshs-23fa
32
vulnerability VCID-pcm6-819d-6uhm
33
vulnerability VCID-pzjb-n7ah-ffcg
34
vulnerability VCID-q12a-kwpk-yufv
35
vulnerability VCID-qbx1-jqke-v7hf
36
vulnerability VCID-qnpc-4r4b-3uhx
37
vulnerability VCID-qr8w-qwb5-6uag
38
vulnerability VCID-s7t9-h2jx-9bgr
39
vulnerability VCID-u52p-wrjp-quhk
40
vulnerability VCID-vwpg-z9en-6yej
41
vulnerability VCID-wfdz-b6c4-quhq
42
vulnerability VCID-xgk2-yecx-q3ff
43
vulnerability VCID-xmby-7b1y-v3cn
44
vulnerability VCID-zssu-1dmn-sycb
45
vulnerability VCID-zthr-mpwx-1fef
46
vulnerability VCID-zv6m-4py8-3ydq
47
vulnerability VCID-zwem-swqk-1kaz
48
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p4
3
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-2tge-6ken-kqge
8
vulnerability VCID-313z-h2v4-c3fr
9
vulnerability VCID-368r-um85-k3d2
10
vulnerability VCID-3a8p-9krx-23e8
11
vulnerability VCID-3s5p-wb18-13ge
12
vulnerability VCID-3uj4-thpr-cue1
13
vulnerability VCID-3ydj-usv4-47fq
14
vulnerability VCID-466x-mpt9-gbgy
15
vulnerability VCID-4b5p-wqtj-7kbe
16
vulnerability VCID-4nqq-nrne-17a2
17
vulnerability VCID-53sd-5nuj-e7d9
18
vulnerability VCID-549e-3kmc-cyfw
19
vulnerability VCID-5edy-fp8q-97fp
20
vulnerability VCID-6d1u-exkw-hbfu
21
vulnerability VCID-6gtw-hr2w-5fcd
22
vulnerability VCID-6v47-xgpq-zkgf
23
vulnerability VCID-78hy-q8kh-kyh7
24
vulnerability VCID-7bmk-3ab2-9ba6
25
vulnerability VCID-7j68-gund-4qhp
26
vulnerability VCID-8365-zgh2-w3cc
27
vulnerability VCID-8gwb-c3ck-37f8
28
vulnerability VCID-8hfe-bt2u-37f9
29
vulnerability VCID-96hr-sbyj-27dw
30
vulnerability VCID-9gb1-p5qf-3kd2
31
vulnerability VCID-9gbf-swtt-7bhz
32
vulnerability VCID-a6gj-zm14-aqhq
33
vulnerability VCID-afft-etfr-n3ep
34
vulnerability VCID-ax9q-y1rb-33b2
35
vulnerability VCID-bfp1-cndf-d7d7
36
vulnerability VCID-bftg-2sea-57cv
37
vulnerability VCID-bvfd-gs5b-dyg7
38
vulnerability VCID-ctrj-y3d6-a7dv
39
vulnerability VCID-cyy2-3rr3-jkc8
40
vulnerability VCID-d9zc-rh9p-4bde
41
vulnerability VCID-dktm-v3jw-f7de
42
vulnerability VCID-dsy7-gm7v-tqc8
43
vulnerability VCID-dytj-h56v-bke9
44
vulnerability VCID-e2t8-b5yy-zkhn
45
vulnerability VCID-e9g4-n5c8-6yf9
46
vulnerability VCID-eban-ja9z-f7ep
47
vulnerability VCID-esjc-zzqy-nycf
48
vulnerability VCID-eusf-bc81-9uhv
49
vulnerability VCID-fb5x-afrq-87aj
50
vulnerability VCID-ferd-u8gt-akds
51
vulnerability VCID-fqkf-67fw-cyb8
52
vulnerability VCID-frhp-vgpt-g7am
53
vulnerability VCID-fz2x-ms14-pkfs
54
vulnerability VCID-gac9-1nnp-67cc
55
vulnerability VCID-gakd-m2af-z7c2
56
vulnerability VCID-ggtj-fbzy-87fx
57
vulnerability VCID-gx3s-7cxk-pyfc
58
vulnerability VCID-gxbc-u5mr-f3c9
59
vulnerability VCID-gzga-qjaf-kugh
60
vulnerability VCID-h2ju-dedu-fqad
61
vulnerability VCID-j9e4-4xta-6qc5
62
vulnerability VCID-jc6r-vmnc-r3g9
63
vulnerability VCID-jeur-3jww-dqee
64
vulnerability VCID-jkrp-j7st-27f3
65
vulnerability VCID-jnuu-9mt7-jyd5
66
vulnerability VCID-jyhf-huep-tya2
67
vulnerability VCID-kf6b-mshs-23fa
68
vulnerability VCID-kfct-k5af-n7fu
69
vulnerability VCID-kjc9-vrhf-hfav
70
vulnerability VCID-ktnj-j4xu-uufs
71
vulnerability VCID-kxjv-xm7r-hkhs
72
vulnerability VCID-mccb-abc5-9yfs
73
vulnerability VCID-ngx2-ewzf-xbd4
74
vulnerability VCID-ntst-nee5-63d3
75
vulnerability VCID-pb4n-m8cv-9bb7
76
vulnerability VCID-pcm6-819d-6uhm
77
vulnerability VCID-pfvk-8q6r-e7c5
78
vulnerability VCID-psnm-zaza-tuf9
79
vulnerability VCID-pu8a-r3v2-g7h9
80
vulnerability VCID-pzjb-n7ah-ffcg
81
vulnerability VCID-q12a-kwpk-yufv
82
vulnerability VCID-q68u-w433-tqb9
83
vulnerability VCID-qbx1-jqke-v7hf
84
vulnerability VCID-qh9p-8b9r-mufh
85
vulnerability VCID-qnpc-4r4b-3uhx
86
vulnerability VCID-qr8w-qwb5-6uag
87
vulnerability VCID-rm7u-jwat-v7f1
88
vulnerability VCID-rw4d-b9yt-mbhz
89
vulnerability VCID-s45p-jru3-w3df
90
vulnerability VCID-s7t9-h2jx-9bgr
91
vulnerability VCID-t4gd-uv9g-ukh5
92
vulnerability VCID-twda-bvut-9bhp
93
vulnerability VCID-twdq-g82m-nqcp
94
vulnerability VCID-u52p-wrjp-quhk
95
vulnerability VCID-u9vz-axk1-fqfn
96
vulnerability VCID-vgz6-nvj3-xqft
97
vulnerability VCID-vwpg-z9en-6yej
98
vulnerability VCID-wfdz-b6c4-quhq
99
vulnerability VCID-wxkj-7zgv-x7bc
100
vulnerability VCID-xgh4-b9yn-dkh4
101
vulnerability VCID-xgk2-yecx-q3ff
102
vulnerability VCID-xjd4-w9bn-mbex
103
vulnerability VCID-xmby-7b1y-v3cn
104
vulnerability VCID-xqc4-jf6e-abfg
105
vulnerability VCID-z97t-ffda-vfes
106
vulnerability VCID-za87-d5x9-wuby
107
vulnerability VCID-zssu-1dmn-sycb
108
vulnerability VCID-zthr-mpwx-1fef
109
vulnerability VCID-zv6m-4py8-3ydq
110
vulnerability VCID-zwem-swqk-1kaz
111
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
4
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-22248, GHSA-5jfg-phx7-7fxg
risk_score 3.4
exploitability 0.5
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-df8h-8pgg-efg2
11
url VCID-eban-ja9z-f7ep
vulnerability_id VCID-eban-ja9z-f7ep
summary Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to gain unauthorized access or perform actions with the privileges of another user. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34106
reference_id
reference_type
scores
0
value 0.00654
scoring_system epss
scoring_elements 0.71417
published_at 2026-06-11T12:55:00Z
1
value 0.00654
scoring_system epss
scoring_elements 0.71516
published_at 2026-06-13T12:55:00Z
2
value 0.00654
scoring_system epss
scoring_elements 0.71504
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34106
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
3
reference_url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
4
reference_url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
5
reference_url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
6
reference_url https://helpx.adobe.com/security/products/magento/apsb24-40.html
reference_id apsb24-40.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-13T16:21:10Z/
url https://helpx.adobe.com/security/products/magento/apsb24-40.html
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34106
reference_id CVE-2024-34106
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34106
8
reference_url https://github.com/advisories/GHSA-p6h9-gx5g-wg64
reference_id GHSA-p6h9-gx5g-wg64
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-p6h9-gx5g-wg64
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p9
purl pkg:composer/magento/community-edition@2.4.4-p9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gakd-m2af-z7c2
7
vulnerability VCID-gx3s-7cxk-pyfc
8
vulnerability VCID-h2ju-dedu-fqad
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-xgh4-b9yn-dkh4
13
vulnerability VCID-xjd4-w9bn-mbex
14
vulnerability VCID-xqc4-jf6e-abfg
15
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p9
1
url pkg:composer/magento/community-edition@2.4.5-p8
purl pkg:composer/magento/community-edition@2.4.5-p8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-2t3q-pmg5-qyhn
2
vulnerability VCID-368r-um85-k3d2
3
vulnerability VCID-3s5p-wb18-13ge
4
vulnerability VCID-3uj4-thpr-cue1
5
vulnerability VCID-3ydj-usv4-47fq
6
vulnerability VCID-4b5p-wqtj-7kbe
7
vulnerability VCID-4nqq-nrne-17a2
8
vulnerability VCID-6v47-xgpq-zkgf
9
vulnerability VCID-7bmk-3ab2-9ba6
10
vulnerability VCID-8365-zgh2-w3cc
11
vulnerability VCID-bftg-2sea-57cv
12
vulnerability VCID-dsy7-gm7v-tqc8
13
vulnerability VCID-eusf-bc81-9uhv
14
vulnerability VCID-gxbc-u5mr-f3c9
15
vulnerability VCID-h2ju-dedu-fqad
16
vulnerability VCID-j9e4-4xta-6qc5
17
vulnerability VCID-jeur-3jww-dqee
18
vulnerability VCID-jyhf-huep-tya2
19
vulnerability VCID-pcm6-819d-6uhm
20
vulnerability VCID-qbx1-jqke-v7hf
21
vulnerability VCID-qnpc-4r4b-3uhx
22
vulnerability VCID-s7t9-h2jx-9bgr
23
vulnerability VCID-u52p-wrjp-quhk
24
vulnerability VCID-vwpg-z9en-6yej
25
vulnerability VCID-wfdz-b6c4-quhq
26
vulnerability VCID-xmby-7b1y-v3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p8
2
url pkg:composer/magento/community-edition@2.4.6-p6
purl pkg:composer/magento/community-edition@2.4.6-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-4b5p-wqtj-7kbe
13
vulnerability VCID-5edy-fp8q-97fp
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-9gbf-swtt-7bhz
20
vulnerability VCID-a6gj-zm14-aqhq
21
vulnerability VCID-ax9q-y1rb-33b2
22
vulnerability VCID-bfp1-cndf-d7d7
23
vulnerability VCID-bftg-2sea-57cv
24
vulnerability VCID-ctrj-y3d6-a7dv
25
vulnerability VCID-cyy2-3rr3-jkc8
26
vulnerability VCID-d9zc-rh9p-4bde
27
vulnerability VCID-dktm-v3jw-f7de
28
vulnerability VCID-dsy7-gm7v-tqc8
29
vulnerability VCID-dytj-h56v-bke9
30
vulnerability VCID-e2t8-b5yy-zkhn
31
vulnerability VCID-esjc-zzqy-nycf
32
vulnerability VCID-ferd-u8gt-akds
33
vulnerability VCID-gac9-1nnp-67cc
34
vulnerability VCID-ggtj-fbzy-87fx
35
vulnerability VCID-gxbc-u5mr-f3c9
36
vulnerability VCID-gzga-qjaf-kugh
37
vulnerability VCID-j9e4-4xta-6qc5
38
vulnerability VCID-jeur-3jww-dqee
39
vulnerability VCID-jyhf-huep-tya2
40
vulnerability VCID-kfct-k5af-n7fu
41
vulnerability VCID-kjc9-vrhf-hfav
42
vulnerability VCID-mccb-abc5-9yfs
43
vulnerability VCID-ngx2-ewzf-xbd4
44
vulnerability VCID-ntst-nee5-63d3
45
vulnerability VCID-pb4n-m8cv-9bb7
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-qbx1-jqke-v7hf
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-qnpc-4r4b-3uhx
52
vulnerability VCID-rm7u-jwat-v7f1
53
vulnerability VCID-rw4d-b9yt-mbhz
54
vulnerability VCID-s45p-jru3-w3df
55
vulnerability VCID-s7t9-h2jx-9bgr
56
vulnerability VCID-t4gd-uv9g-ukh5
57
vulnerability VCID-twda-bvut-9bhp
58
vulnerability VCID-u52p-wrjp-quhk
59
vulnerability VCID-u9vz-axk1-fqfn
60
vulnerability VCID-vgz6-nvj3-xqft
61
vulnerability VCID-vwpg-z9en-6yej
62
vulnerability VCID-wfdz-b6c4-quhq
63
vulnerability VCID-wxkj-7zgv-x7bc
64
vulnerability VCID-xmby-7b1y-v3cn
65
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p6
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2024-34106, GHSA-p6h9-gx5g-wg64
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eban-ja9z-f7ep
12
url VCID-ezee-pmc6-tuc2
vulnerability_id VCID-ezee-pmc6-tuc2
summary Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A privileged attacker could leverage this vulnerability to modify a minor functionality of another user's data. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29288
reference_id
reference_type
scores
0
value 0.00164
scoring_system epss
scoring_elements 0.37306
published_at 2026-06-12T12:55:00Z
1
value 0.00164
scoring_system epss
scoring_elements 0.37331
published_at 2026-06-13T12:55:00Z
2
value 0.00164
scoring_system epss
scoring_elements 0.37127
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29288
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29288
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29288
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id apsb23-35.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-05T18:36:27Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
4
reference_url https://github.com/advisories/GHSA-f989-3fp9-q3r2
reference_id GHSA-f989-3fp9-q3r2
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f989-3fp9-q3r2
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-2tge-6ken-kqge
2
vulnerability VCID-466x-mpt9-gbgy
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-549e-3kmc-cyfw
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-6gtw-hr2w-5fcd
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-8hfe-bt2u-37f9
9
vulnerability VCID-96hr-sbyj-27dw
10
vulnerability VCID-9gb1-p5qf-3kd2
11
vulnerability VCID-afft-etfr-n3ep
12
vulnerability VCID-e9g4-n5c8-6yf9
13
vulnerability VCID-eban-ja9z-f7ep
14
vulnerability VCID-eusf-bc81-9uhv
15
vulnerability VCID-fb5x-afrq-87aj
16
vulnerability VCID-fqkf-67fw-cyb8
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-fz2x-ms14-pkfs
19
vulnerability VCID-gakd-m2af-z7c2
20
vulnerability VCID-gx3s-7cxk-pyfc
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jkrp-j7st-27f3
23
vulnerability VCID-jnuu-9mt7-jyd5
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-ktnj-j4xu-uufs
26
vulnerability VCID-pcm6-819d-6uhm
27
vulnerability VCID-pzjb-n7ah-ffcg
28
vulnerability VCID-q12a-kwpk-yufv
29
vulnerability VCID-qr8w-qwb5-6uag
30
vulnerability VCID-twdq-g82m-nqcp
31
vulnerability VCID-xgh4-b9yn-dkh4
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xjd4-w9bn-mbex
34
vulnerability VCID-xqc4-jf6e-abfg
35
vulnerability VCID-z97t-ffda-vfes
36
vulnerability VCID-zssu-1dmn-sycb
37
vulnerability VCID-zthr-mpwx-1fef
38
vulnerability VCID-zv6m-4py8-3ydq
39
vulnerability VCID-zwem-swqk-1kaz
40
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-2tge-6ken-kqge
4
vulnerability VCID-368r-um85-k3d2
5
vulnerability VCID-3s5p-wb18-13ge
6
vulnerability VCID-3uj4-thpr-cue1
7
vulnerability VCID-3ydj-usv4-47fq
8
vulnerability VCID-466x-mpt9-gbgy
9
vulnerability VCID-4b5p-wqtj-7kbe
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-549e-3kmc-cyfw
12
vulnerability VCID-6gtw-hr2w-5fcd
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-7bmk-3ab2-9ba6
15
vulnerability VCID-8365-zgh2-w3cc
16
vulnerability VCID-8hfe-bt2u-37f9
17
vulnerability VCID-96hr-sbyj-27dw
18
vulnerability VCID-afft-etfr-n3ep
19
vulnerability VCID-bftg-2sea-57cv
20
vulnerability VCID-dsy7-gm7v-tqc8
21
vulnerability VCID-e9g4-n5c8-6yf9
22
vulnerability VCID-eban-ja9z-f7ep
23
vulnerability VCID-eusf-bc81-9uhv
24
vulnerability VCID-fb5x-afrq-87aj
25
vulnerability VCID-frhp-vgpt-g7am
26
vulnerability VCID-fz2x-ms14-pkfs
27
vulnerability VCID-gxbc-u5mr-f3c9
28
vulnerability VCID-h2ju-dedu-fqad
29
vulnerability VCID-j9e4-4xta-6qc5
30
vulnerability VCID-jeur-3jww-dqee
31
vulnerability VCID-jkrp-j7st-27f3
32
vulnerability VCID-jnuu-9mt7-jyd5
33
vulnerability VCID-jyhf-huep-tya2
34
vulnerability VCID-kf6b-mshs-23fa
35
vulnerability VCID-pcm6-819d-6uhm
36
vulnerability VCID-pzjb-n7ah-ffcg
37
vulnerability VCID-q12a-kwpk-yufv
38
vulnerability VCID-qbx1-jqke-v7hf
39
vulnerability VCID-qnpc-4r4b-3uhx
40
vulnerability VCID-qr8w-qwb5-6uag
41
vulnerability VCID-s7t9-h2jx-9bgr
42
vulnerability VCID-u52p-wrjp-quhk
43
vulnerability VCID-vwpg-z9en-6yej
44
vulnerability VCID-wfdz-b6c4-quhq
45
vulnerability VCID-xgk2-yecx-q3ff
46
vulnerability VCID-xmby-7b1y-v3cn
47
vulnerability VCID-zssu-1dmn-sycb
48
vulnerability VCID-zthr-mpwx-1fef
49
vulnerability VCID-zv6m-4py8-3ydq
50
vulnerability VCID-zwem-swqk-1kaz
51
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
2
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-2tge-6ken-kqge
8
vulnerability VCID-313z-h2v4-c3fr
9
vulnerability VCID-368r-um85-k3d2
10
vulnerability VCID-3a8p-9krx-23e8
11
vulnerability VCID-3s5p-wb18-13ge
12
vulnerability VCID-3uj4-thpr-cue1
13
vulnerability VCID-3ydj-usv4-47fq
14
vulnerability VCID-466x-mpt9-gbgy
15
vulnerability VCID-4b5p-wqtj-7kbe
16
vulnerability VCID-4nqq-nrne-17a2
17
vulnerability VCID-53sd-5nuj-e7d9
18
vulnerability VCID-549e-3kmc-cyfw
19
vulnerability VCID-5edy-fp8q-97fp
20
vulnerability VCID-6d1u-exkw-hbfu
21
vulnerability VCID-6gtw-hr2w-5fcd
22
vulnerability VCID-6v47-xgpq-zkgf
23
vulnerability VCID-78hy-q8kh-kyh7
24
vulnerability VCID-7bmk-3ab2-9ba6
25
vulnerability VCID-7j68-gund-4qhp
26
vulnerability VCID-8365-zgh2-w3cc
27
vulnerability VCID-8gwb-c3ck-37f8
28
vulnerability VCID-8hfe-bt2u-37f9
29
vulnerability VCID-96hr-sbyj-27dw
30
vulnerability VCID-9gb1-p5qf-3kd2
31
vulnerability VCID-9gbf-swtt-7bhz
32
vulnerability VCID-a6gj-zm14-aqhq
33
vulnerability VCID-afft-etfr-n3ep
34
vulnerability VCID-ax9q-y1rb-33b2
35
vulnerability VCID-bfp1-cndf-d7d7
36
vulnerability VCID-bftg-2sea-57cv
37
vulnerability VCID-bvfd-gs5b-dyg7
38
vulnerability VCID-ctrj-y3d6-a7dv
39
vulnerability VCID-cyy2-3rr3-jkc8
40
vulnerability VCID-d9zc-rh9p-4bde
41
vulnerability VCID-dktm-v3jw-f7de
42
vulnerability VCID-dsy7-gm7v-tqc8
43
vulnerability VCID-dytj-h56v-bke9
44
vulnerability VCID-e2t8-b5yy-zkhn
45
vulnerability VCID-e9g4-n5c8-6yf9
46
vulnerability VCID-eban-ja9z-f7ep
47
vulnerability VCID-esjc-zzqy-nycf
48
vulnerability VCID-eusf-bc81-9uhv
49
vulnerability VCID-fb5x-afrq-87aj
50
vulnerability VCID-ferd-u8gt-akds
51
vulnerability VCID-fqkf-67fw-cyb8
52
vulnerability VCID-frhp-vgpt-g7am
53
vulnerability VCID-fz2x-ms14-pkfs
54
vulnerability VCID-gac9-1nnp-67cc
55
vulnerability VCID-gakd-m2af-z7c2
56
vulnerability VCID-ggtj-fbzy-87fx
57
vulnerability VCID-gx3s-7cxk-pyfc
58
vulnerability VCID-gxbc-u5mr-f3c9
59
vulnerability VCID-gzga-qjaf-kugh
60
vulnerability VCID-h2ju-dedu-fqad
61
vulnerability VCID-j9e4-4xta-6qc5
62
vulnerability VCID-jc6r-vmnc-r3g9
63
vulnerability VCID-jeur-3jww-dqee
64
vulnerability VCID-jkrp-j7st-27f3
65
vulnerability VCID-jnuu-9mt7-jyd5
66
vulnerability VCID-jyhf-huep-tya2
67
vulnerability VCID-kf6b-mshs-23fa
68
vulnerability VCID-kfct-k5af-n7fu
69
vulnerability VCID-kjc9-vrhf-hfav
70
vulnerability VCID-ktnj-j4xu-uufs
71
vulnerability VCID-kxjv-xm7r-hkhs
72
vulnerability VCID-mccb-abc5-9yfs
73
vulnerability VCID-ngx2-ewzf-xbd4
74
vulnerability VCID-ntst-nee5-63d3
75
vulnerability VCID-pb4n-m8cv-9bb7
76
vulnerability VCID-pcm6-819d-6uhm
77
vulnerability VCID-pfvk-8q6r-e7c5
78
vulnerability VCID-psnm-zaza-tuf9
79
vulnerability VCID-pu8a-r3v2-g7h9
80
vulnerability VCID-pzjb-n7ah-ffcg
81
vulnerability VCID-q12a-kwpk-yufv
82
vulnerability VCID-q68u-w433-tqb9
83
vulnerability VCID-qbx1-jqke-v7hf
84
vulnerability VCID-qh9p-8b9r-mufh
85
vulnerability VCID-qnpc-4r4b-3uhx
86
vulnerability VCID-qr8w-qwb5-6uag
87
vulnerability VCID-rm7u-jwat-v7f1
88
vulnerability VCID-rw4d-b9yt-mbhz
89
vulnerability VCID-s45p-jru3-w3df
90
vulnerability VCID-s7t9-h2jx-9bgr
91
vulnerability VCID-t4gd-uv9g-ukh5
92
vulnerability VCID-twda-bvut-9bhp
93
vulnerability VCID-twdq-g82m-nqcp
94
vulnerability VCID-u52p-wrjp-quhk
95
vulnerability VCID-u9vz-axk1-fqfn
96
vulnerability VCID-vgz6-nvj3-xqft
97
vulnerability VCID-vwpg-z9en-6yej
98
vulnerability VCID-wfdz-b6c4-quhq
99
vulnerability VCID-wxkj-7zgv-x7bc
100
vulnerability VCID-xgh4-b9yn-dkh4
101
vulnerability VCID-xgk2-yecx-q3ff
102
vulnerability VCID-xjd4-w9bn-mbex
103
vulnerability VCID-xmby-7b1y-v3cn
104
vulnerability VCID-xqc4-jf6e-abfg
105
vulnerability VCID-z97t-ffda-vfes
106
vulnerability VCID-za87-d5x9-wuby
107
vulnerability VCID-zssu-1dmn-sycb
108
vulnerability VCID-zthr-mpwx-1fef
109
vulnerability VCID-zv6m-4py8-3ydq
110
vulnerability VCID-zwem-swqk-1kaz
111
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-29288, GHSA-f989-3fp9-q3r2
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ezee-pmc6-tuc2
13
url VCID-ff1h-49j6-fygj
vulnerability_id VCID-ff1h-49j6-fygj
summary Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An admin privileged attacker could leverage this vulnerability to impact the availability of a user's minor feature. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29293
reference_id
reference_type
scores
0
value 0.00045
scoring_system epss
scoring_elements 0.14335
published_at 2026-06-13T12:55:00Z
1
value 0.00045
scoring_system epss
scoring_elements 0.14216
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29293
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
1
value 1.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29293
reference_id
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
1
value 1.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29293
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id apsb23-35.html
reference_type
scores
0
value 2.7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
1
value 1.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-05T18:36:13Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
4
reference_url https://github.com/advisories/GHSA-66c9-xrwj-9xv6
reference_id GHSA-66c9-xrwj-9xv6
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-66c9-xrwj-9xv6
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-2tge-6ken-kqge
2
vulnerability VCID-466x-mpt9-gbgy
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-549e-3kmc-cyfw
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-6gtw-hr2w-5fcd
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-8hfe-bt2u-37f9
9
vulnerability VCID-96hr-sbyj-27dw
10
vulnerability VCID-9gb1-p5qf-3kd2
11
vulnerability VCID-afft-etfr-n3ep
12
vulnerability VCID-e9g4-n5c8-6yf9
13
vulnerability VCID-eban-ja9z-f7ep
14
vulnerability VCID-eusf-bc81-9uhv
15
vulnerability VCID-fb5x-afrq-87aj
16
vulnerability VCID-fqkf-67fw-cyb8
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-fz2x-ms14-pkfs
19
vulnerability VCID-gakd-m2af-z7c2
20
vulnerability VCID-gx3s-7cxk-pyfc
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jkrp-j7st-27f3
23
vulnerability VCID-jnuu-9mt7-jyd5
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-ktnj-j4xu-uufs
26
vulnerability VCID-pcm6-819d-6uhm
27
vulnerability VCID-pzjb-n7ah-ffcg
28
vulnerability VCID-q12a-kwpk-yufv
29
vulnerability VCID-qr8w-qwb5-6uag
30
vulnerability VCID-twdq-g82m-nqcp
31
vulnerability VCID-xgh4-b9yn-dkh4
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xjd4-w9bn-mbex
34
vulnerability VCID-xqc4-jf6e-abfg
35
vulnerability VCID-z97t-ffda-vfes
36
vulnerability VCID-zssu-1dmn-sycb
37
vulnerability VCID-zthr-mpwx-1fef
38
vulnerability VCID-zv6m-4py8-3ydq
39
vulnerability VCID-zwem-swqk-1kaz
40
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-2tge-6ken-kqge
4
vulnerability VCID-368r-um85-k3d2
5
vulnerability VCID-3s5p-wb18-13ge
6
vulnerability VCID-3uj4-thpr-cue1
7
vulnerability VCID-3ydj-usv4-47fq
8
vulnerability VCID-466x-mpt9-gbgy
9
vulnerability VCID-4b5p-wqtj-7kbe
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-549e-3kmc-cyfw
12
vulnerability VCID-6gtw-hr2w-5fcd
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-7bmk-3ab2-9ba6
15
vulnerability VCID-8365-zgh2-w3cc
16
vulnerability VCID-8hfe-bt2u-37f9
17
vulnerability VCID-96hr-sbyj-27dw
18
vulnerability VCID-afft-etfr-n3ep
19
vulnerability VCID-bftg-2sea-57cv
20
vulnerability VCID-dsy7-gm7v-tqc8
21
vulnerability VCID-e9g4-n5c8-6yf9
22
vulnerability VCID-eban-ja9z-f7ep
23
vulnerability VCID-eusf-bc81-9uhv
24
vulnerability VCID-fb5x-afrq-87aj
25
vulnerability VCID-frhp-vgpt-g7am
26
vulnerability VCID-fz2x-ms14-pkfs
27
vulnerability VCID-gxbc-u5mr-f3c9
28
vulnerability VCID-h2ju-dedu-fqad
29
vulnerability VCID-j9e4-4xta-6qc5
30
vulnerability VCID-jeur-3jww-dqee
31
vulnerability VCID-jkrp-j7st-27f3
32
vulnerability VCID-jnuu-9mt7-jyd5
33
vulnerability VCID-jyhf-huep-tya2
34
vulnerability VCID-kf6b-mshs-23fa
35
vulnerability VCID-pcm6-819d-6uhm
36
vulnerability VCID-pzjb-n7ah-ffcg
37
vulnerability VCID-q12a-kwpk-yufv
38
vulnerability VCID-qbx1-jqke-v7hf
39
vulnerability VCID-qnpc-4r4b-3uhx
40
vulnerability VCID-qr8w-qwb5-6uag
41
vulnerability VCID-s7t9-h2jx-9bgr
42
vulnerability VCID-u52p-wrjp-quhk
43
vulnerability VCID-vwpg-z9en-6yej
44
vulnerability VCID-wfdz-b6c4-quhq
45
vulnerability VCID-xgk2-yecx-q3ff
46
vulnerability VCID-xmby-7b1y-v3cn
47
vulnerability VCID-zssu-1dmn-sycb
48
vulnerability VCID-zthr-mpwx-1fef
49
vulnerability VCID-zv6m-4py8-3ydq
50
vulnerability VCID-zwem-swqk-1kaz
51
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
2
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-2tge-6ken-kqge
8
vulnerability VCID-313z-h2v4-c3fr
9
vulnerability VCID-368r-um85-k3d2
10
vulnerability VCID-3a8p-9krx-23e8
11
vulnerability VCID-3s5p-wb18-13ge
12
vulnerability VCID-3uj4-thpr-cue1
13
vulnerability VCID-3ydj-usv4-47fq
14
vulnerability VCID-466x-mpt9-gbgy
15
vulnerability VCID-4b5p-wqtj-7kbe
16
vulnerability VCID-4nqq-nrne-17a2
17
vulnerability VCID-53sd-5nuj-e7d9
18
vulnerability VCID-549e-3kmc-cyfw
19
vulnerability VCID-5edy-fp8q-97fp
20
vulnerability VCID-6d1u-exkw-hbfu
21
vulnerability VCID-6gtw-hr2w-5fcd
22
vulnerability VCID-6v47-xgpq-zkgf
23
vulnerability VCID-78hy-q8kh-kyh7
24
vulnerability VCID-7bmk-3ab2-9ba6
25
vulnerability VCID-7j68-gund-4qhp
26
vulnerability VCID-8365-zgh2-w3cc
27
vulnerability VCID-8gwb-c3ck-37f8
28
vulnerability VCID-8hfe-bt2u-37f9
29
vulnerability VCID-96hr-sbyj-27dw
30
vulnerability VCID-9gb1-p5qf-3kd2
31
vulnerability VCID-9gbf-swtt-7bhz
32
vulnerability VCID-a6gj-zm14-aqhq
33
vulnerability VCID-afft-etfr-n3ep
34
vulnerability VCID-ax9q-y1rb-33b2
35
vulnerability VCID-bfp1-cndf-d7d7
36
vulnerability VCID-bftg-2sea-57cv
37
vulnerability VCID-bvfd-gs5b-dyg7
38
vulnerability VCID-ctrj-y3d6-a7dv
39
vulnerability VCID-cyy2-3rr3-jkc8
40
vulnerability VCID-d9zc-rh9p-4bde
41
vulnerability VCID-dktm-v3jw-f7de
42
vulnerability VCID-dsy7-gm7v-tqc8
43
vulnerability VCID-dytj-h56v-bke9
44
vulnerability VCID-e2t8-b5yy-zkhn
45
vulnerability VCID-e9g4-n5c8-6yf9
46
vulnerability VCID-eban-ja9z-f7ep
47
vulnerability VCID-esjc-zzqy-nycf
48
vulnerability VCID-eusf-bc81-9uhv
49
vulnerability VCID-fb5x-afrq-87aj
50
vulnerability VCID-ferd-u8gt-akds
51
vulnerability VCID-fqkf-67fw-cyb8
52
vulnerability VCID-frhp-vgpt-g7am
53
vulnerability VCID-fz2x-ms14-pkfs
54
vulnerability VCID-gac9-1nnp-67cc
55
vulnerability VCID-gakd-m2af-z7c2
56
vulnerability VCID-ggtj-fbzy-87fx
57
vulnerability VCID-gx3s-7cxk-pyfc
58
vulnerability VCID-gxbc-u5mr-f3c9
59
vulnerability VCID-gzga-qjaf-kugh
60
vulnerability VCID-h2ju-dedu-fqad
61
vulnerability VCID-j9e4-4xta-6qc5
62
vulnerability VCID-jc6r-vmnc-r3g9
63
vulnerability VCID-jeur-3jww-dqee
64
vulnerability VCID-jkrp-j7st-27f3
65
vulnerability VCID-jnuu-9mt7-jyd5
66
vulnerability VCID-jyhf-huep-tya2
67
vulnerability VCID-kf6b-mshs-23fa
68
vulnerability VCID-kfct-k5af-n7fu
69
vulnerability VCID-kjc9-vrhf-hfav
70
vulnerability VCID-ktnj-j4xu-uufs
71
vulnerability VCID-kxjv-xm7r-hkhs
72
vulnerability VCID-mccb-abc5-9yfs
73
vulnerability VCID-ngx2-ewzf-xbd4
74
vulnerability VCID-ntst-nee5-63d3
75
vulnerability VCID-pb4n-m8cv-9bb7
76
vulnerability VCID-pcm6-819d-6uhm
77
vulnerability VCID-pfvk-8q6r-e7c5
78
vulnerability VCID-psnm-zaza-tuf9
79
vulnerability VCID-pu8a-r3v2-g7h9
80
vulnerability VCID-pzjb-n7ah-ffcg
81
vulnerability VCID-q12a-kwpk-yufv
82
vulnerability VCID-q68u-w433-tqb9
83
vulnerability VCID-qbx1-jqke-v7hf
84
vulnerability VCID-qh9p-8b9r-mufh
85
vulnerability VCID-qnpc-4r4b-3uhx
86
vulnerability VCID-qr8w-qwb5-6uag
87
vulnerability VCID-rm7u-jwat-v7f1
88
vulnerability VCID-rw4d-b9yt-mbhz
89
vulnerability VCID-s45p-jru3-w3df
90
vulnerability VCID-s7t9-h2jx-9bgr
91
vulnerability VCID-t4gd-uv9g-ukh5
92
vulnerability VCID-twda-bvut-9bhp
93
vulnerability VCID-twdq-g82m-nqcp
94
vulnerability VCID-u52p-wrjp-quhk
95
vulnerability VCID-u9vz-axk1-fqfn
96
vulnerability VCID-vgz6-nvj3-xqft
97
vulnerability VCID-vwpg-z9en-6yej
98
vulnerability VCID-wfdz-b6c4-quhq
99
vulnerability VCID-wxkj-7zgv-x7bc
100
vulnerability VCID-xgh4-b9yn-dkh4
101
vulnerability VCID-xgk2-yecx-q3ff
102
vulnerability VCID-xjd4-w9bn-mbex
103
vulnerability VCID-xmby-7b1y-v3cn
104
vulnerability VCID-xqc4-jf6e-abfg
105
vulnerability VCID-z97t-ffda-vfes
106
vulnerability VCID-za87-d5x9-wuby
107
vulnerability VCID-zssu-1dmn-sycb
108
vulnerability VCID-zthr-mpwx-1fef
109
vulnerability VCID-zv6m-4py8-3ydq
110
vulnerability VCID-zwem-swqk-1kaz
111
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-29293, GHSA-66c9-xrwj-9xv6
risk_score 1.4
exploitability 0.5
weighted_severity 2.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ff1h-49j6-fygj
14
url VCID-frhp-vgpt-g7am
vulnerability_id VCID-frhp-vgpt-g7am
summary Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Authentication vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain unauthorized access or elevated privileges within the application. Exploitation of this issue does not require user interaction, but attack complexity is high.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34103
reference_id
reference_type
scores
0
value 0.01824
scoring_system epss
scoring_elements 0.83363
published_at 2026-06-13T12:55:00Z
1
value 0.01824
scoring_system epss
scoring_elements 0.83294
published_at 2026-06-11T12:55:00Z
2
value 0.01824
scoring_system epss
scoring_elements 0.83355
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34103
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
3
reference_url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
4
reference_url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
5
reference_url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
6
reference_url https://helpx.adobe.com/security/products/magento/apsb24-40.html
reference_id apsb24-40.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-14T03:55:29Z/
url https://helpx.adobe.com/security/products/magento/apsb24-40.html
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34103
reference_id CVE-2024-34103
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value 9.2
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34103
8
reference_url https://github.com/advisories/GHSA-f7q4-9gwv-6774
reference_id GHSA-f7q4-9gwv-6774
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f7q4-9gwv-6774
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p9
purl pkg:composer/magento/community-edition@2.4.4-p9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gakd-m2af-z7c2
7
vulnerability VCID-gx3s-7cxk-pyfc
8
vulnerability VCID-h2ju-dedu-fqad
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-xgh4-b9yn-dkh4
13
vulnerability VCID-xjd4-w9bn-mbex
14
vulnerability VCID-xqc4-jf6e-abfg
15
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p9
1
url pkg:composer/magento/community-edition@2.4.5-p8
purl pkg:composer/magento/community-edition@2.4.5-p8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-2t3q-pmg5-qyhn
2
vulnerability VCID-368r-um85-k3d2
3
vulnerability VCID-3s5p-wb18-13ge
4
vulnerability VCID-3uj4-thpr-cue1
5
vulnerability VCID-3ydj-usv4-47fq
6
vulnerability VCID-4b5p-wqtj-7kbe
7
vulnerability VCID-4nqq-nrne-17a2
8
vulnerability VCID-6v47-xgpq-zkgf
9
vulnerability VCID-7bmk-3ab2-9ba6
10
vulnerability VCID-8365-zgh2-w3cc
11
vulnerability VCID-bftg-2sea-57cv
12
vulnerability VCID-dsy7-gm7v-tqc8
13
vulnerability VCID-eusf-bc81-9uhv
14
vulnerability VCID-gxbc-u5mr-f3c9
15
vulnerability VCID-h2ju-dedu-fqad
16
vulnerability VCID-j9e4-4xta-6qc5
17
vulnerability VCID-jeur-3jww-dqee
18
vulnerability VCID-jyhf-huep-tya2
19
vulnerability VCID-pcm6-819d-6uhm
20
vulnerability VCID-qbx1-jqke-v7hf
21
vulnerability VCID-qnpc-4r4b-3uhx
22
vulnerability VCID-s7t9-h2jx-9bgr
23
vulnerability VCID-u52p-wrjp-quhk
24
vulnerability VCID-vwpg-z9en-6yej
25
vulnerability VCID-wfdz-b6c4-quhq
26
vulnerability VCID-xmby-7b1y-v3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p8
2
url pkg:composer/magento/community-edition@2.4.6-p6
purl pkg:composer/magento/community-edition@2.4.6-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-4b5p-wqtj-7kbe
13
vulnerability VCID-5edy-fp8q-97fp
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-9gbf-swtt-7bhz
20
vulnerability VCID-a6gj-zm14-aqhq
21
vulnerability VCID-ax9q-y1rb-33b2
22
vulnerability VCID-bfp1-cndf-d7d7
23
vulnerability VCID-bftg-2sea-57cv
24
vulnerability VCID-ctrj-y3d6-a7dv
25
vulnerability VCID-cyy2-3rr3-jkc8
26
vulnerability VCID-d9zc-rh9p-4bde
27
vulnerability VCID-dktm-v3jw-f7de
28
vulnerability VCID-dsy7-gm7v-tqc8
29
vulnerability VCID-dytj-h56v-bke9
30
vulnerability VCID-e2t8-b5yy-zkhn
31
vulnerability VCID-esjc-zzqy-nycf
32
vulnerability VCID-ferd-u8gt-akds
33
vulnerability VCID-gac9-1nnp-67cc
34
vulnerability VCID-ggtj-fbzy-87fx
35
vulnerability VCID-gxbc-u5mr-f3c9
36
vulnerability VCID-gzga-qjaf-kugh
37
vulnerability VCID-j9e4-4xta-6qc5
38
vulnerability VCID-jeur-3jww-dqee
39
vulnerability VCID-jyhf-huep-tya2
40
vulnerability VCID-kfct-k5af-n7fu
41
vulnerability VCID-kjc9-vrhf-hfav
42
vulnerability VCID-mccb-abc5-9yfs
43
vulnerability VCID-ngx2-ewzf-xbd4
44
vulnerability VCID-ntst-nee5-63d3
45
vulnerability VCID-pb4n-m8cv-9bb7
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-qbx1-jqke-v7hf
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-qnpc-4r4b-3uhx
52
vulnerability VCID-rm7u-jwat-v7f1
53
vulnerability VCID-rw4d-b9yt-mbhz
54
vulnerability VCID-s45p-jru3-w3df
55
vulnerability VCID-s7t9-h2jx-9bgr
56
vulnerability VCID-t4gd-uv9g-ukh5
57
vulnerability VCID-twda-bvut-9bhp
58
vulnerability VCID-u52p-wrjp-quhk
59
vulnerability VCID-u9vz-axk1-fqfn
60
vulnerability VCID-vgz6-nvj3-xqft
61
vulnerability VCID-vwpg-z9en-6yej
62
vulnerability VCID-wfdz-b6c4-quhq
63
vulnerability VCID-wxkj-7zgv-x7bc
64
vulnerability VCID-xmby-7b1y-v3cn
65
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p6
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2024-34103, GHSA-f7q4-9gwv-6774
risk_score 4.5
exploitability 0.5
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-frhp-vgpt-g7am
15
url VCID-fz2x-ms14-pkfs
vulnerability_id VCID-fz2x-ms14-pkfs
summary Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an admin attacker to inject malicious scripts into every admin page. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field, that could be leveraged to gain admin access.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-20719
reference_id
reference_type
scores
0
value 0.01149
scoring_system epss
scoring_elements 0.78899
published_at 2026-06-11T12:55:00Z
1
value 0.01149
scoring_system epss
scoring_elements 0.78982
published_at 2026-06-13T12:55:00Z
2
value 0.01149
scoring_system epss
scoring_elements 0.78965
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-20719
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 7.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-03.html
reference_id apsb24-03.html
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 7.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-02-21T05:00:29Z/
url https://helpx.adobe.com/security/products/magento/apsb24-03.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-20719
reference_id CVE-2024-20719
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 7.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-20719
4
reference_url https://github.com/advisories/GHSA-264g-f7v8-q5qq
reference_id GHSA-264g-f7v8-q5qq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-264g-f7v8-q5qq
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p7
purl pkg:composer/magento/community-edition@2.4.4-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-549e-3kmc-cyfw
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-96hr-sbyj-27dw
5
vulnerability VCID-9gb1-p5qf-3kd2
6
vulnerability VCID-eban-ja9z-f7ep
7
vulnerability VCID-eusf-bc81-9uhv
8
vulnerability VCID-fqkf-67fw-cyb8
9
vulnerability VCID-frhp-vgpt-g7am
10
vulnerability VCID-gakd-m2af-z7c2
11
vulnerability VCID-gx3s-7cxk-pyfc
12
vulnerability VCID-h2ju-dedu-fqad
13
vulnerability VCID-jnuu-9mt7-jyd5
14
vulnerability VCID-kf6b-mshs-23fa
15
vulnerability VCID-ktnj-j4xu-uufs
16
vulnerability VCID-pcm6-819d-6uhm
17
vulnerability VCID-twdq-g82m-nqcp
18
vulnerability VCID-xgh4-b9yn-dkh4
19
vulnerability VCID-xgk2-yecx-q3ff
20
vulnerability VCID-xjd4-w9bn-mbex
21
vulnerability VCID-xqc4-jf6e-abfg
22
vulnerability VCID-z97t-ffda-vfes
23
vulnerability VCID-zthr-mpwx-1fef
24
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p7
1
url pkg:composer/magento/community-edition@2.4.5-p6
purl pkg:composer/magento/community-edition@2.4.5-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-2t3q-pmg5-qyhn
2
vulnerability VCID-368r-um85-k3d2
3
vulnerability VCID-3s5p-wb18-13ge
4
vulnerability VCID-3uj4-thpr-cue1
5
vulnerability VCID-3ydj-usv4-47fq
6
vulnerability VCID-4b5p-wqtj-7kbe
7
vulnerability VCID-4nqq-nrne-17a2
8
vulnerability VCID-549e-3kmc-cyfw
9
vulnerability VCID-6v47-xgpq-zkgf
10
vulnerability VCID-7bmk-3ab2-9ba6
11
vulnerability VCID-8365-zgh2-w3cc
12
vulnerability VCID-96hr-sbyj-27dw
13
vulnerability VCID-bftg-2sea-57cv
14
vulnerability VCID-dsy7-gm7v-tqc8
15
vulnerability VCID-eban-ja9z-f7ep
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-gxbc-u5mr-f3c9
19
vulnerability VCID-h2ju-dedu-fqad
20
vulnerability VCID-j9e4-4xta-6qc5
21
vulnerability VCID-jeur-3jww-dqee
22
vulnerability VCID-jnuu-9mt7-jyd5
23
vulnerability VCID-jyhf-huep-tya2
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-pcm6-819d-6uhm
26
vulnerability VCID-qbx1-jqke-v7hf
27
vulnerability VCID-qnpc-4r4b-3uhx
28
vulnerability VCID-s7t9-h2jx-9bgr
29
vulnerability VCID-u52p-wrjp-quhk
30
vulnerability VCID-vwpg-z9en-6yej
31
vulnerability VCID-wfdz-b6c4-quhq
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xmby-7b1y-v3cn
34
vulnerability VCID-zthr-mpwx-1fef
35
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p6
2
url pkg:composer/magento/community-edition@2.4.6-p4
purl pkg:composer/magento/community-edition@2.4.6-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-4b5p-wqtj-7kbe
13
vulnerability VCID-549e-3kmc-cyfw
14
vulnerability VCID-5edy-fp8q-97fp
15
vulnerability VCID-6v47-xgpq-zkgf
16
vulnerability VCID-78hy-q8kh-kyh7
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-96hr-sbyj-27dw
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-ctrj-y3d6-a7dv
27
vulnerability VCID-cyy2-3rr3-jkc8
28
vulnerability VCID-d9zc-rh9p-4bde
29
vulnerability VCID-dktm-v3jw-f7de
30
vulnerability VCID-dsy7-gm7v-tqc8
31
vulnerability VCID-dytj-h56v-bke9
32
vulnerability VCID-e2t8-b5yy-zkhn
33
vulnerability VCID-eban-ja9z-f7ep
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-ferd-u8gt-akds
36
vulnerability VCID-frhp-vgpt-g7am
37
vulnerability VCID-gac9-1nnp-67cc
38
vulnerability VCID-ggtj-fbzy-87fx
39
vulnerability VCID-gxbc-u5mr-f3c9
40
vulnerability VCID-gzga-qjaf-kugh
41
vulnerability VCID-j9e4-4xta-6qc5
42
vulnerability VCID-jeur-3jww-dqee
43
vulnerability VCID-jnuu-9mt7-jyd5
44
vulnerability VCID-jyhf-huep-tya2
45
vulnerability VCID-kf6b-mshs-23fa
46
vulnerability VCID-kfct-k5af-n7fu
47
vulnerability VCID-kjc9-vrhf-hfav
48
vulnerability VCID-mccb-abc5-9yfs
49
vulnerability VCID-ngx2-ewzf-xbd4
50
vulnerability VCID-ntst-nee5-63d3
51
vulnerability VCID-pb4n-m8cv-9bb7
52
vulnerability VCID-pfvk-8q6r-e7c5
53
vulnerability VCID-psnm-zaza-tuf9
54
vulnerability VCID-pu8a-r3v2-g7h9
55
vulnerability VCID-qbx1-jqke-v7hf
56
vulnerability VCID-qh9p-8b9r-mufh
57
vulnerability VCID-qnpc-4r4b-3uhx
58
vulnerability VCID-rm7u-jwat-v7f1
59
vulnerability VCID-rw4d-b9yt-mbhz
60
vulnerability VCID-s45p-jru3-w3df
61
vulnerability VCID-s7t9-h2jx-9bgr
62
vulnerability VCID-t4gd-uv9g-ukh5
63
vulnerability VCID-twda-bvut-9bhp
64
vulnerability VCID-u52p-wrjp-quhk
65
vulnerability VCID-u9vz-axk1-fqfn
66
vulnerability VCID-vgz6-nvj3-xqft
67
vulnerability VCID-vwpg-z9en-6yej
68
vulnerability VCID-wfdz-b6c4-quhq
69
vulnerability VCID-wxkj-7zgv-x7bc
70
vulnerability VCID-xgk2-yecx-q3ff
71
vulnerability VCID-xmby-7b1y-v3cn
72
vulnerability VCID-za87-d5x9-wuby
73
vulnerability VCID-zthr-mpwx-1fef
74
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p4
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2024-20719, GHSA-264g-f7v8-q5qq
risk_score 4.1
exploitability 0.5
weighted_severity 8.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fz2x-ms14-pkfs
16
url VCID-jc6r-vmnc-r3g9
vulnerability_id VCID-jc6r-vmnc-r3g9
summary Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-27188
reference_id
reference_type
scores
0
value 0.00157
scoring_system epss
scoring_elements 0.36497
published_at 2026-06-12T12:55:00Z
1
value 0.00157
scoring_system epss
scoring_elements 0.36523
published_at 2026-06-13T12:55:00Z
2
value 0.00157
scoring_system epss
scoring_elements 0.36317
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-27188
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-27188
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-27188
3
reference_url https://helpx.adobe.com/security/products/magento/apsb25-26.html
reference_id apsb25-26.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-08T20:53:30Z/
url https://helpx.adobe.com/security/products/magento/apsb25-26.html
4
reference_url https://github.com/advisories/GHSA-rr2g-rrjj-xw86
reference_id GHSA-rr2g-rrjj-xw86
reference_type
scores
url https://github.com/advisories/GHSA-rr2g-rrjj-xw86
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p13
purl pkg:composer/magento/community-edition@2.4.4-p13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gakd-m2af-z7c2
8
vulnerability VCID-gx3s-7cxk-pyfc
9
vulnerability VCID-h2ju-dedu-fqad
10
vulnerability VCID-ktnj-j4xu-uufs
11
vulnerability VCID-pcm6-819d-6uhm
12
vulnerability VCID-twdq-g82m-nqcp
13
vulnerability VCID-xgh4-b9yn-dkh4
14
vulnerability VCID-xjd4-w9bn-mbex
15
vulnerability VCID-xqc4-jf6e-abfg
16
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p13
1
url pkg:composer/magento/community-edition@2.4.5-p12
purl pkg:composer/magento/community-edition@2.4.5-p12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gakd-m2af-z7c2
8
vulnerability VCID-gx3s-7cxk-pyfc
9
vulnerability VCID-h2ju-dedu-fqad
10
vulnerability VCID-ktnj-j4xu-uufs
11
vulnerability VCID-pcm6-819d-6uhm
12
vulnerability VCID-twdq-g82m-nqcp
13
vulnerability VCID-xgh4-b9yn-dkh4
14
vulnerability VCID-xjd4-w9bn-mbex
15
vulnerability VCID-xqc4-jf6e-abfg
16
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p12
2
url pkg:composer/magento/community-edition@2.4.6-p10
purl pkg:composer/magento/community-edition@2.4.6-p10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gakd-m2af-z7c2
8
vulnerability VCID-gx3s-7cxk-pyfc
9
vulnerability VCID-h2ju-dedu-fqad
10
vulnerability VCID-ktnj-j4xu-uufs
11
vulnerability VCID-pcm6-819d-6uhm
12
vulnerability VCID-twdq-g82m-nqcp
13
vulnerability VCID-xgh4-b9yn-dkh4
14
vulnerability VCID-xjd4-w9bn-mbex
15
vulnerability VCID-xqc4-jf6e-abfg
16
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p10
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
4
url pkg:composer/magento/community-edition@2.4.7-p5
purl pkg:composer/magento/community-edition@2.4.7-p5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gakd-m2af-z7c2
8
vulnerability VCID-gx3s-7cxk-pyfc
9
vulnerability VCID-h2ju-dedu-fqad
10
vulnerability VCID-ktnj-j4xu-uufs
11
vulnerability VCID-pcm6-819d-6uhm
12
vulnerability VCID-twdq-g82m-nqcp
13
vulnerability VCID-xgh4-b9yn-dkh4
14
vulnerability VCID-xjd4-w9bn-mbex
15
vulnerability VCID-xqc4-jf6e-abfg
16
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p5
5
url pkg:composer/magento/community-edition@2.4.8
purl pkg:composer/magento/community-edition@2.4.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-53sd-5nuj-e7d9
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-9gb1-p5qf-3kd2
5
vulnerability VCID-eusf-bc81-9uhv
6
vulnerability VCID-fqkf-67fw-cyb8
7
vulnerability VCID-gakd-m2af-z7c2
8
vulnerability VCID-gx3s-7cxk-pyfc
9
vulnerability VCID-h2ju-dedu-fqad
10
vulnerability VCID-ktnj-j4xu-uufs
11
vulnerability VCID-pcm6-819d-6uhm
12
vulnerability VCID-twdq-g82m-nqcp
13
vulnerability VCID-xgh4-b9yn-dkh4
14
vulnerability VCID-xjd4-w9bn-mbex
15
vulnerability VCID-xqc4-jf6e-abfg
16
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.8
aliases CVE-2025-27188, GHSA-rr2g-rrjj-xw86
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jc6r-vmnc-r3g9
17
url VCID-jeur-3jww-dqee
vulnerability_id VCID-jeur-3jww-dqee
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and perform a minor integrity change. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39412
reference_id
reference_type
scores
0
value 0.00269
scoring_system epss
scoring_elements 0.50617
published_at 2026-06-11T12:55:00Z
1
value 0.00269
scoring_system epss
scoring_elements 0.50768
published_at 2026-06-13T12:55:00Z
2
value 0.00269
scoring_system epss
scoring_elements 0.50751
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39412
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:11:56Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39412
reference_id CVE-2024-39412
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39412
4
reference_url https://github.com/advisories/GHSA-7472-vw39-g2j3
reference_id GHSA-7472-vw39-g2j3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7472-vw39-g2j3
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p10
purl pkg:composer/magento/community-edition@2.4.4-p10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p10
1
url pkg:composer/magento/community-edition@2.4.5-p9
purl pkg:composer/magento/community-edition@2.4.5-p9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-7bmk-3ab2-9ba6
2
vulnerability VCID-eusf-bc81-9uhv
3
vulnerability VCID-h2ju-dedu-fqad
4
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p9
2
url pkg:composer/magento/community-edition@2.4.6-p7
purl pkg:composer/magento/community-edition@2.4.6-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-5edy-fp8q-97fp
7
vulnerability VCID-78hy-q8kh-kyh7
8
vulnerability VCID-7j68-gund-4qhp
9
vulnerability VCID-8gwb-c3ck-37f8
10
vulnerability VCID-9gbf-swtt-7bhz
11
vulnerability VCID-a6gj-zm14-aqhq
12
vulnerability VCID-ax9q-y1rb-33b2
13
vulnerability VCID-bfp1-cndf-d7d7
14
vulnerability VCID-ctrj-y3d6-a7dv
15
vulnerability VCID-cyy2-3rr3-jkc8
16
vulnerability VCID-d9zc-rh9p-4bde
17
vulnerability VCID-dktm-v3jw-f7de
18
vulnerability VCID-dytj-h56v-bke9
19
vulnerability VCID-e2t8-b5yy-zkhn
20
vulnerability VCID-esjc-zzqy-nycf
21
vulnerability VCID-ferd-u8gt-akds
22
vulnerability VCID-gac9-1nnp-67cc
23
vulnerability VCID-ggtj-fbzy-87fx
24
vulnerability VCID-gzga-qjaf-kugh
25
vulnerability VCID-kfct-k5af-n7fu
26
vulnerability VCID-kjc9-vrhf-hfav
27
vulnerability VCID-mccb-abc5-9yfs
28
vulnerability VCID-ngx2-ewzf-xbd4
29
vulnerability VCID-ntst-nee5-63d3
30
vulnerability VCID-pb4n-m8cv-9bb7
31
vulnerability VCID-pfvk-8q6r-e7c5
32
vulnerability VCID-psnm-zaza-tuf9
33
vulnerability VCID-pu8a-r3v2-g7h9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-rw4d-b9yt-mbhz
37
vulnerability VCID-s45p-jru3-w3df
38
vulnerability VCID-t4gd-uv9g-ukh5
39
vulnerability VCID-twda-bvut-9bhp
40
vulnerability VCID-u9vz-axk1-fqfn
41
vulnerability VCID-vgz6-nvj3-xqft
42
vulnerability VCID-wxkj-7zgv-x7bc
43
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p7
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
4
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39412, GHSA-7472-vw39-g2j3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jeur-3jww-dqee
18
url VCID-kbkg-d58m-h7bf
vulnerability_id VCID-kbkg-d58m-h7bf
summary Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to modify a minor functionality of another user's data. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29296
reference_id
reference_type
scores
0
value 0.0012
scoring_system epss
scoring_elements 0.30792
published_at 2026-06-12T12:55:00Z
1
value 0.0012
scoring_system epss
scoring_elements 0.3081
published_at 2026-06-13T12:55:00Z
2
value 0.0012
scoring_system epss
scoring_elements 0.30594
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29296
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29296
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29296
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id apsb23-35.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-05T18:36:03Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
4
reference_url https://github.com/advisories/GHSA-3qr4-w96f-672v
reference_id GHSA-3qr4-w96f-672v
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3qr4-w96f-672v
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-2tge-6ken-kqge
2
vulnerability VCID-466x-mpt9-gbgy
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-549e-3kmc-cyfw
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-6gtw-hr2w-5fcd
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-8hfe-bt2u-37f9
9
vulnerability VCID-96hr-sbyj-27dw
10
vulnerability VCID-9gb1-p5qf-3kd2
11
vulnerability VCID-afft-etfr-n3ep
12
vulnerability VCID-e9g4-n5c8-6yf9
13
vulnerability VCID-eban-ja9z-f7ep
14
vulnerability VCID-eusf-bc81-9uhv
15
vulnerability VCID-fb5x-afrq-87aj
16
vulnerability VCID-fqkf-67fw-cyb8
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-fz2x-ms14-pkfs
19
vulnerability VCID-gakd-m2af-z7c2
20
vulnerability VCID-gx3s-7cxk-pyfc
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jkrp-j7st-27f3
23
vulnerability VCID-jnuu-9mt7-jyd5
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-ktnj-j4xu-uufs
26
vulnerability VCID-pcm6-819d-6uhm
27
vulnerability VCID-pzjb-n7ah-ffcg
28
vulnerability VCID-q12a-kwpk-yufv
29
vulnerability VCID-qr8w-qwb5-6uag
30
vulnerability VCID-twdq-g82m-nqcp
31
vulnerability VCID-xgh4-b9yn-dkh4
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xjd4-w9bn-mbex
34
vulnerability VCID-xqc4-jf6e-abfg
35
vulnerability VCID-z97t-ffda-vfes
36
vulnerability VCID-zssu-1dmn-sycb
37
vulnerability VCID-zthr-mpwx-1fef
38
vulnerability VCID-zv6m-4py8-3ydq
39
vulnerability VCID-zwem-swqk-1kaz
40
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-2tge-6ken-kqge
4
vulnerability VCID-368r-um85-k3d2
5
vulnerability VCID-3s5p-wb18-13ge
6
vulnerability VCID-3uj4-thpr-cue1
7
vulnerability VCID-3ydj-usv4-47fq
8
vulnerability VCID-466x-mpt9-gbgy
9
vulnerability VCID-4b5p-wqtj-7kbe
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-549e-3kmc-cyfw
12
vulnerability VCID-6gtw-hr2w-5fcd
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-7bmk-3ab2-9ba6
15
vulnerability VCID-8365-zgh2-w3cc
16
vulnerability VCID-8hfe-bt2u-37f9
17
vulnerability VCID-96hr-sbyj-27dw
18
vulnerability VCID-afft-etfr-n3ep
19
vulnerability VCID-bftg-2sea-57cv
20
vulnerability VCID-dsy7-gm7v-tqc8
21
vulnerability VCID-e9g4-n5c8-6yf9
22
vulnerability VCID-eban-ja9z-f7ep
23
vulnerability VCID-eusf-bc81-9uhv
24
vulnerability VCID-fb5x-afrq-87aj
25
vulnerability VCID-frhp-vgpt-g7am
26
vulnerability VCID-fz2x-ms14-pkfs
27
vulnerability VCID-gxbc-u5mr-f3c9
28
vulnerability VCID-h2ju-dedu-fqad
29
vulnerability VCID-j9e4-4xta-6qc5
30
vulnerability VCID-jeur-3jww-dqee
31
vulnerability VCID-jkrp-j7st-27f3
32
vulnerability VCID-jnuu-9mt7-jyd5
33
vulnerability VCID-jyhf-huep-tya2
34
vulnerability VCID-kf6b-mshs-23fa
35
vulnerability VCID-pcm6-819d-6uhm
36
vulnerability VCID-pzjb-n7ah-ffcg
37
vulnerability VCID-q12a-kwpk-yufv
38
vulnerability VCID-qbx1-jqke-v7hf
39
vulnerability VCID-qnpc-4r4b-3uhx
40
vulnerability VCID-qr8w-qwb5-6uag
41
vulnerability VCID-s7t9-h2jx-9bgr
42
vulnerability VCID-u52p-wrjp-quhk
43
vulnerability VCID-vwpg-z9en-6yej
44
vulnerability VCID-wfdz-b6c4-quhq
45
vulnerability VCID-xgk2-yecx-q3ff
46
vulnerability VCID-xmby-7b1y-v3cn
47
vulnerability VCID-zssu-1dmn-sycb
48
vulnerability VCID-zthr-mpwx-1fef
49
vulnerability VCID-zv6m-4py8-3ydq
50
vulnerability VCID-zwem-swqk-1kaz
51
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
2
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-2tge-6ken-kqge
8
vulnerability VCID-313z-h2v4-c3fr
9
vulnerability VCID-368r-um85-k3d2
10
vulnerability VCID-3a8p-9krx-23e8
11
vulnerability VCID-3s5p-wb18-13ge
12
vulnerability VCID-3uj4-thpr-cue1
13
vulnerability VCID-3ydj-usv4-47fq
14
vulnerability VCID-466x-mpt9-gbgy
15
vulnerability VCID-4b5p-wqtj-7kbe
16
vulnerability VCID-4nqq-nrne-17a2
17
vulnerability VCID-53sd-5nuj-e7d9
18
vulnerability VCID-549e-3kmc-cyfw
19
vulnerability VCID-5edy-fp8q-97fp
20
vulnerability VCID-6d1u-exkw-hbfu
21
vulnerability VCID-6gtw-hr2w-5fcd
22
vulnerability VCID-6v47-xgpq-zkgf
23
vulnerability VCID-78hy-q8kh-kyh7
24
vulnerability VCID-7bmk-3ab2-9ba6
25
vulnerability VCID-7j68-gund-4qhp
26
vulnerability VCID-8365-zgh2-w3cc
27
vulnerability VCID-8gwb-c3ck-37f8
28
vulnerability VCID-8hfe-bt2u-37f9
29
vulnerability VCID-96hr-sbyj-27dw
30
vulnerability VCID-9gb1-p5qf-3kd2
31
vulnerability VCID-9gbf-swtt-7bhz
32
vulnerability VCID-a6gj-zm14-aqhq
33
vulnerability VCID-afft-etfr-n3ep
34
vulnerability VCID-ax9q-y1rb-33b2
35
vulnerability VCID-bfp1-cndf-d7d7
36
vulnerability VCID-bftg-2sea-57cv
37
vulnerability VCID-bvfd-gs5b-dyg7
38
vulnerability VCID-ctrj-y3d6-a7dv
39
vulnerability VCID-cyy2-3rr3-jkc8
40
vulnerability VCID-d9zc-rh9p-4bde
41
vulnerability VCID-dktm-v3jw-f7de
42
vulnerability VCID-dsy7-gm7v-tqc8
43
vulnerability VCID-dytj-h56v-bke9
44
vulnerability VCID-e2t8-b5yy-zkhn
45
vulnerability VCID-e9g4-n5c8-6yf9
46
vulnerability VCID-eban-ja9z-f7ep
47
vulnerability VCID-esjc-zzqy-nycf
48
vulnerability VCID-eusf-bc81-9uhv
49
vulnerability VCID-fb5x-afrq-87aj
50
vulnerability VCID-ferd-u8gt-akds
51
vulnerability VCID-fqkf-67fw-cyb8
52
vulnerability VCID-frhp-vgpt-g7am
53
vulnerability VCID-fz2x-ms14-pkfs
54
vulnerability VCID-gac9-1nnp-67cc
55
vulnerability VCID-gakd-m2af-z7c2
56
vulnerability VCID-ggtj-fbzy-87fx
57
vulnerability VCID-gx3s-7cxk-pyfc
58
vulnerability VCID-gxbc-u5mr-f3c9
59
vulnerability VCID-gzga-qjaf-kugh
60
vulnerability VCID-h2ju-dedu-fqad
61
vulnerability VCID-j9e4-4xta-6qc5
62
vulnerability VCID-jc6r-vmnc-r3g9
63
vulnerability VCID-jeur-3jww-dqee
64
vulnerability VCID-jkrp-j7st-27f3
65
vulnerability VCID-jnuu-9mt7-jyd5
66
vulnerability VCID-jyhf-huep-tya2
67
vulnerability VCID-kf6b-mshs-23fa
68
vulnerability VCID-kfct-k5af-n7fu
69
vulnerability VCID-kjc9-vrhf-hfav
70
vulnerability VCID-ktnj-j4xu-uufs
71
vulnerability VCID-kxjv-xm7r-hkhs
72
vulnerability VCID-mccb-abc5-9yfs
73
vulnerability VCID-ngx2-ewzf-xbd4
74
vulnerability VCID-ntst-nee5-63d3
75
vulnerability VCID-pb4n-m8cv-9bb7
76
vulnerability VCID-pcm6-819d-6uhm
77
vulnerability VCID-pfvk-8q6r-e7c5
78
vulnerability VCID-psnm-zaza-tuf9
79
vulnerability VCID-pu8a-r3v2-g7h9
80
vulnerability VCID-pzjb-n7ah-ffcg
81
vulnerability VCID-q12a-kwpk-yufv
82
vulnerability VCID-q68u-w433-tqb9
83
vulnerability VCID-qbx1-jqke-v7hf
84
vulnerability VCID-qh9p-8b9r-mufh
85
vulnerability VCID-qnpc-4r4b-3uhx
86
vulnerability VCID-qr8w-qwb5-6uag
87
vulnerability VCID-rm7u-jwat-v7f1
88
vulnerability VCID-rw4d-b9yt-mbhz
89
vulnerability VCID-s45p-jru3-w3df
90
vulnerability VCID-s7t9-h2jx-9bgr
91
vulnerability VCID-t4gd-uv9g-ukh5
92
vulnerability VCID-twda-bvut-9bhp
93
vulnerability VCID-twdq-g82m-nqcp
94
vulnerability VCID-u52p-wrjp-quhk
95
vulnerability VCID-u9vz-axk1-fqfn
96
vulnerability VCID-vgz6-nvj3-xqft
97
vulnerability VCID-vwpg-z9en-6yej
98
vulnerability VCID-wfdz-b6c4-quhq
99
vulnerability VCID-wxkj-7zgv-x7bc
100
vulnerability VCID-xgh4-b9yn-dkh4
101
vulnerability VCID-xgk2-yecx-q3ff
102
vulnerability VCID-xjd4-w9bn-mbex
103
vulnerability VCID-xmby-7b1y-v3cn
104
vulnerability VCID-xqc4-jf6e-abfg
105
vulnerability VCID-z97t-ffda-vfes
106
vulnerability VCID-za87-d5x9-wuby
107
vulnerability VCID-zssu-1dmn-sycb
108
vulnerability VCID-zthr-mpwx-1fef
109
vulnerability VCID-zv6m-4py8-3ydq
110
vulnerability VCID-zwem-swqk-1kaz
111
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-29296, GHSA-3qr4-w96f-672v
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kbkg-d58m-h7bf
19
url VCID-kf6b-mshs-23fa
vulnerability_id VCID-kf6b-mshs-23fa
summary Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and view minor unauthorised information. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34107
reference_id
reference_type
scores
0
value 0.00729
scoring_system epss
scoring_elements 0.7321
published_at 2026-06-13T12:55:00Z
1
value 0.00729
scoring_system epss
scoring_elements 0.73117
published_at 2026-06-11T12:55:00Z
2
value 0.00729
scoring_system epss
scoring_elements 0.73195
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34107
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
3
reference_url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
4
reference_url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
5
reference_url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
6
reference_url https://helpx.adobe.com/security/products/magento/apsb24-40.html
reference_id apsb24-40.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2024-06-14T13:30:50Z/
url https://helpx.adobe.com/security/products/magento/apsb24-40.html
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34107
reference_id CVE-2024-34107
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34107
8
reference_url https://github.com/advisories/GHSA-r7cm-g469-wm4g
reference_id GHSA-r7cm-g469-wm4g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r7cm-g469-wm4g
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p9
purl pkg:composer/magento/community-edition@2.4.4-p9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gakd-m2af-z7c2
7
vulnerability VCID-gx3s-7cxk-pyfc
8
vulnerability VCID-h2ju-dedu-fqad
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-xgh4-b9yn-dkh4
13
vulnerability VCID-xjd4-w9bn-mbex
14
vulnerability VCID-xqc4-jf6e-abfg
15
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p9
1
url pkg:composer/magento/community-edition@2.4.5-p8
purl pkg:composer/magento/community-edition@2.4.5-p8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-2t3q-pmg5-qyhn
2
vulnerability VCID-368r-um85-k3d2
3
vulnerability VCID-3s5p-wb18-13ge
4
vulnerability VCID-3uj4-thpr-cue1
5
vulnerability VCID-3ydj-usv4-47fq
6
vulnerability VCID-4b5p-wqtj-7kbe
7
vulnerability VCID-4nqq-nrne-17a2
8
vulnerability VCID-6v47-xgpq-zkgf
9
vulnerability VCID-7bmk-3ab2-9ba6
10
vulnerability VCID-8365-zgh2-w3cc
11
vulnerability VCID-bftg-2sea-57cv
12
vulnerability VCID-dsy7-gm7v-tqc8
13
vulnerability VCID-eusf-bc81-9uhv
14
vulnerability VCID-gxbc-u5mr-f3c9
15
vulnerability VCID-h2ju-dedu-fqad
16
vulnerability VCID-j9e4-4xta-6qc5
17
vulnerability VCID-jeur-3jww-dqee
18
vulnerability VCID-jyhf-huep-tya2
19
vulnerability VCID-pcm6-819d-6uhm
20
vulnerability VCID-qbx1-jqke-v7hf
21
vulnerability VCID-qnpc-4r4b-3uhx
22
vulnerability VCID-s7t9-h2jx-9bgr
23
vulnerability VCID-u52p-wrjp-quhk
24
vulnerability VCID-vwpg-z9en-6yej
25
vulnerability VCID-wfdz-b6c4-quhq
26
vulnerability VCID-xmby-7b1y-v3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p8
2
url pkg:composer/magento/community-edition@2.4.6-p6
purl pkg:composer/magento/community-edition@2.4.6-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-4b5p-wqtj-7kbe
13
vulnerability VCID-5edy-fp8q-97fp
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-9gbf-swtt-7bhz
20
vulnerability VCID-a6gj-zm14-aqhq
21
vulnerability VCID-ax9q-y1rb-33b2
22
vulnerability VCID-bfp1-cndf-d7d7
23
vulnerability VCID-bftg-2sea-57cv
24
vulnerability VCID-ctrj-y3d6-a7dv
25
vulnerability VCID-cyy2-3rr3-jkc8
26
vulnerability VCID-d9zc-rh9p-4bde
27
vulnerability VCID-dktm-v3jw-f7de
28
vulnerability VCID-dsy7-gm7v-tqc8
29
vulnerability VCID-dytj-h56v-bke9
30
vulnerability VCID-e2t8-b5yy-zkhn
31
vulnerability VCID-esjc-zzqy-nycf
32
vulnerability VCID-ferd-u8gt-akds
33
vulnerability VCID-gac9-1nnp-67cc
34
vulnerability VCID-ggtj-fbzy-87fx
35
vulnerability VCID-gxbc-u5mr-f3c9
36
vulnerability VCID-gzga-qjaf-kugh
37
vulnerability VCID-j9e4-4xta-6qc5
38
vulnerability VCID-jeur-3jww-dqee
39
vulnerability VCID-jyhf-huep-tya2
40
vulnerability VCID-kfct-k5af-n7fu
41
vulnerability VCID-kjc9-vrhf-hfav
42
vulnerability VCID-mccb-abc5-9yfs
43
vulnerability VCID-ngx2-ewzf-xbd4
44
vulnerability VCID-ntst-nee5-63d3
45
vulnerability VCID-pb4n-m8cv-9bb7
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-qbx1-jqke-v7hf
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-qnpc-4r4b-3uhx
52
vulnerability VCID-rm7u-jwat-v7f1
53
vulnerability VCID-rw4d-b9yt-mbhz
54
vulnerability VCID-s45p-jru3-w3df
55
vulnerability VCID-s7t9-h2jx-9bgr
56
vulnerability VCID-t4gd-uv9g-ukh5
57
vulnerability VCID-twda-bvut-9bhp
58
vulnerability VCID-u52p-wrjp-quhk
59
vulnerability VCID-u9vz-axk1-fqfn
60
vulnerability VCID-vgz6-nvj3-xqft
61
vulnerability VCID-vwpg-z9en-6yej
62
vulnerability VCID-wfdz-b6c4-quhq
63
vulnerability VCID-wxkj-7zgv-x7bc
64
vulnerability VCID-xmby-7b1y-v3cn
65
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p6
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2024-34107, GHSA-r7cm-g469-wm4g
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kf6b-mshs-23fa
20
url VCID-mb5s-j22m-3qdx
vulnerability_id VCID-mb5s-j22m-3qdx
summary Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29297
reference_id
reference_type
scores
0
value 0.08749
scoring_system epss
scoring_elements 0.92718
published_at 2026-06-12T12:55:00Z
1
value 0.08749
scoring_system epss
scoring_elements 0.92721
published_at 2026-06-13T12:55:00Z
2
value 0.08749
scoring_system epss
scoring_elements 0.92693
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29297
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 7.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29297
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 7.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29297
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id apsb23-35.html
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 7.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-05T18:37:01Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
4
reference_url https://github.com/advisories/GHSA-gfmm-ww6f-5mm5
reference_id GHSA-gfmm-ww6f-5mm5
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gfmm-ww6f-5mm5
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-2tge-6ken-kqge
2
vulnerability VCID-466x-mpt9-gbgy
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-549e-3kmc-cyfw
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-6gtw-hr2w-5fcd
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-8hfe-bt2u-37f9
9
vulnerability VCID-96hr-sbyj-27dw
10
vulnerability VCID-9gb1-p5qf-3kd2
11
vulnerability VCID-afft-etfr-n3ep
12
vulnerability VCID-e9g4-n5c8-6yf9
13
vulnerability VCID-eban-ja9z-f7ep
14
vulnerability VCID-eusf-bc81-9uhv
15
vulnerability VCID-fb5x-afrq-87aj
16
vulnerability VCID-fqkf-67fw-cyb8
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-fz2x-ms14-pkfs
19
vulnerability VCID-gakd-m2af-z7c2
20
vulnerability VCID-gx3s-7cxk-pyfc
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jkrp-j7st-27f3
23
vulnerability VCID-jnuu-9mt7-jyd5
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-ktnj-j4xu-uufs
26
vulnerability VCID-pcm6-819d-6uhm
27
vulnerability VCID-pzjb-n7ah-ffcg
28
vulnerability VCID-q12a-kwpk-yufv
29
vulnerability VCID-qr8w-qwb5-6uag
30
vulnerability VCID-twdq-g82m-nqcp
31
vulnerability VCID-xgh4-b9yn-dkh4
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xjd4-w9bn-mbex
34
vulnerability VCID-xqc4-jf6e-abfg
35
vulnerability VCID-z97t-ffda-vfes
36
vulnerability VCID-zssu-1dmn-sycb
37
vulnerability VCID-zthr-mpwx-1fef
38
vulnerability VCID-zv6m-4py8-3ydq
39
vulnerability VCID-zwem-swqk-1kaz
40
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-2tge-6ken-kqge
4
vulnerability VCID-368r-um85-k3d2
5
vulnerability VCID-3s5p-wb18-13ge
6
vulnerability VCID-3uj4-thpr-cue1
7
vulnerability VCID-3ydj-usv4-47fq
8
vulnerability VCID-466x-mpt9-gbgy
9
vulnerability VCID-4b5p-wqtj-7kbe
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-549e-3kmc-cyfw
12
vulnerability VCID-6gtw-hr2w-5fcd
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-7bmk-3ab2-9ba6
15
vulnerability VCID-8365-zgh2-w3cc
16
vulnerability VCID-8hfe-bt2u-37f9
17
vulnerability VCID-96hr-sbyj-27dw
18
vulnerability VCID-afft-etfr-n3ep
19
vulnerability VCID-bftg-2sea-57cv
20
vulnerability VCID-dsy7-gm7v-tqc8
21
vulnerability VCID-e9g4-n5c8-6yf9
22
vulnerability VCID-eban-ja9z-f7ep
23
vulnerability VCID-eusf-bc81-9uhv
24
vulnerability VCID-fb5x-afrq-87aj
25
vulnerability VCID-frhp-vgpt-g7am
26
vulnerability VCID-fz2x-ms14-pkfs
27
vulnerability VCID-gxbc-u5mr-f3c9
28
vulnerability VCID-h2ju-dedu-fqad
29
vulnerability VCID-j9e4-4xta-6qc5
30
vulnerability VCID-jeur-3jww-dqee
31
vulnerability VCID-jkrp-j7st-27f3
32
vulnerability VCID-jnuu-9mt7-jyd5
33
vulnerability VCID-jyhf-huep-tya2
34
vulnerability VCID-kf6b-mshs-23fa
35
vulnerability VCID-pcm6-819d-6uhm
36
vulnerability VCID-pzjb-n7ah-ffcg
37
vulnerability VCID-q12a-kwpk-yufv
38
vulnerability VCID-qbx1-jqke-v7hf
39
vulnerability VCID-qnpc-4r4b-3uhx
40
vulnerability VCID-qr8w-qwb5-6uag
41
vulnerability VCID-s7t9-h2jx-9bgr
42
vulnerability VCID-u52p-wrjp-quhk
43
vulnerability VCID-vwpg-z9en-6yej
44
vulnerability VCID-wfdz-b6c4-quhq
45
vulnerability VCID-xgk2-yecx-q3ff
46
vulnerability VCID-xmby-7b1y-v3cn
47
vulnerability VCID-zssu-1dmn-sycb
48
vulnerability VCID-zthr-mpwx-1fef
49
vulnerability VCID-zv6m-4py8-3ydq
50
vulnerability VCID-zwem-swqk-1kaz
51
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
2
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-2tge-6ken-kqge
8
vulnerability VCID-313z-h2v4-c3fr
9
vulnerability VCID-368r-um85-k3d2
10
vulnerability VCID-3a8p-9krx-23e8
11
vulnerability VCID-3s5p-wb18-13ge
12
vulnerability VCID-3uj4-thpr-cue1
13
vulnerability VCID-3ydj-usv4-47fq
14
vulnerability VCID-466x-mpt9-gbgy
15
vulnerability VCID-4b5p-wqtj-7kbe
16
vulnerability VCID-4nqq-nrne-17a2
17
vulnerability VCID-53sd-5nuj-e7d9
18
vulnerability VCID-549e-3kmc-cyfw
19
vulnerability VCID-5edy-fp8q-97fp
20
vulnerability VCID-6d1u-exkw-hbfu
21
vulnerability VCID-6gtw-hr2w-5fcd
22
vulnerability VCID-6v47-xgpq-zkgf
23
vulnerability VCID-78hy-q8kh-kyh7
24
vulnerability VCID-7bmk-3ab2-9ba6
25
vulnerability VCID-7j68-gund-4qhp
26
vulnerability VCID-8365-zgh2-w3cc
27
vulnerability VCID-8gwb-c3ck-37f8
28
vulnerability VCID-8hfe-bt2u-37f9
29
vulnerability VCID-96hr-sbyj-27dw
30
vulnerability VCID-9gb1-p5qf-3kd2
31
vulnerability VCID-9gbf-swtt-7bhz
32
vulnerability VCID-a6gj-zm14-aqhq
33
vulnerability VCID-afft-etfr-n3ep
34
vulnerability VCID-ax9q-y1rb-33b2
35
vulnerability VCID-bfp1-cndf-d7d7
36
vulnerability VCID-bftg-2sea-57cv
37
vulnerability VCID-bvfd-gs5b-dyg7
38
vulnerability VCID-ctrj-y3d6-a7dv
39
vulnerability VCID-cyy2-3rr3-jkc8
40
vulnerability VCID-d9zc-rh9p-4bde
41
vulnerability VCID-dktm-v3jw-f7de
42
vulnerability VCID-dsy7-gm7v-tqc8
43
vulnerability VCID-dytj-h56v-bke9
44
vulnerability VCID-e2t8-b5yy-zkhn
45
vulnerability VCID-e9g4-n5c8-6yf9
46
vulnerability VCID-eban-ja9z-f7ep
47
vulnerability VCID-esjc-zzqy-nycf
48
vulnerability VCID-eusf-bc81-9uhv
49
vulnerability VCID-fb5x-afrq-87aj
50
vulnerability VCID-ferd-u8gt-akds
51
vulnerability VCID-fqkf-67fw-cyb8
52
vulnerability VCID-frhp-vgpt-g7am
53
vulnerability VCID-fz2x-ms14-pkfs
54
vulnerability VCID-gac9-1nnp-67cc
55
vulnerability VCID-gakd-m2af-z7c2
56
vulnerability VCID-ggtj-fbzy-87fx
57
vulnerability VCID-gx3s-7cxk-pyfc
58
vulnerability VCID-gxbc-u5mr-f3c9
59
vulnerability VCID-gzga-qjaf-kugh
60
vulnerability VCID-h2ju-dedu-fqad
61
vulnerability VCID-j9e4-4xta-6qc5
62
vulnerability VCID-jc6r-vmnc-r3g9
63
vulnerability VCID-jeur-3jww-dqee
64
vulnerability VCID-jkrp-j7st-27f3
65
vulnerability VCID-jnuu-9mt7-jyd5
66
vulnerability VCID-jyhf-huep-tya2
67
vulnerability VCID-kf6b-mshs-23fa
68
vulnerability VCID-kfct-k5af-n7fu
69
vulnerability VCID-kjc9-vrhf-hfav
70
vulnerability VCID-ktnj-j4xu-uufs
71
vulnerability VCID-kxjv-xm7r-hkhs
72
vulnerability VCID-mccb-abc5-9yfs
73
vulnerability VCID-ngx2-ewzf-xbd4
74
vulnerability VCID-ntst-nee5-63d3
75
vulnerability VCID-pb4n-m8cv-9bb7
76
vulnerability VCID-pcm6-819d-6uhm
77
vulnerability VCID-pfvk-8q6r-e7c5
78
vulnerability VCID-psnm-zaza-tuf9
79
vulnerability VCID-pu8a-r3v2-g7h9
80
vulnerability VCID-pzjb-n7ah-ffcg
81
vulnerability VCID-q12a-kwpk-yufv
82
vulnerability VCID-q68u-w433-tqb9
83
vulnerability VCID-qbx1-jqke-v7hf
84
vulnerability VCID-qh9p-8b9r-mufh
85
vulnerability VCID-qnpc-4r4b-3uhx
86
vulnerability VCID-qr8w-qwb5-6uag
87
vulnerability VCID-rm7u-jwat-v7f1
88
vulnerability VCID-rw4d-b9yt-mbhz
89
vulnerability VCID-s45p-jru3-w3df
90
vulnerability VCID-s7t9-h2jx-9bgr
91
vulnerability VCID-t4gd-uv9g-ukh5
92
vulnerability VCID-twda-bvut-9bhp
93
vulnerability VCID-twdq-g82m-nqcp
94
vulnerability VCID-u52p-wrjp-quhk
95
vulnerability VCID-u9vz-axk1-fqfn
96
vulnerability VCID-vgz6-nvj3-xqft
97
vulnerability VCID-vwpg-z9en-6yej
98
vulnerability VCID-wfdz-b6c4-quhq
99
vulnerability VCID-wxkj-7zgv-x7bc
100
vulnerability VCID-xgh4-b9yn-dkh4
101
vulnerability VCID-xgk2-yecx-q3ff
102
vulnerability VCID-xjd4-w9bn-mbex
103
vulnerability VCID-xmby-7b1y-v3cn
104
vulnerability VCID-xqc4-jf6e-abfg
105
vulnerability VCID-z97t-ffda-vfes
106
vulnerability VCID-za87-d5x9-wuby
107
vulnerability VCID-zssu-1dmn-sycb
108
vulnerability VCID-zthr-mpwx-1fef
109
vulnerability VCID-zv6m-4py8-3ydq
110
vulnerability VCID-zwem-swqk-1kaz
111
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-29297, GHSA-gfmm-ww6f-5mm5
risk_score 4.1
exploitability 0.5
weighted_severity 8.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mb5s-j22m-3qdx
21
url VCID-pzjb-n7ah-ffcg
vulnerability_id VCID-pzjb-n7ah-ffcg
summary Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-20720
reference_id
reference_type
scores
0
value 0.07195
scoring_system epss
scoring_elements 0.91784
published_at 2026-06-11T12:55:00Z
1
value 0.07195
scoring_system epss
scoring_elements 0.91821
published_at 2026-06-13T12:55:00Z
2
value 0.07195
scoring_system epss
scoring_elements 0.91812
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-20720
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 7.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-03.html
reference_id apsb24-03.html
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 7.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-05-11T17:46:31Z/
url https://helpx.adobe.com/security/products/magento/apsb24-03.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-20720
reference_id CVE-2024-20720
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
1
value 7.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-20720
4
reference_url https://github.com/advisories/GHSA-525f-pvj5-vqmq
reference_id GHSA-525f-pvj5-vqmq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-525f-pvj5-vqmq
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p7
purl pkg:composer/magento/community-edition@2.4.4-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-549e-3kmc-cyfw
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-96hr-sbyj-27dw
5
vulnerability VCID-9gb1-p5qf-3kd2
6
vulnerability VCID-eban-ja9z-f7ep
7
vulnerability VCID-eusf-bc81-9uhv
8
vulnerability VCID-fqkf-67fw-cyb8
9
vulnerability VCID-frhp-vgpt-g7am
10
vulnerability VCID-gakd-m2af-z7c2
11
vulnerability VCID-gx3s-7cxk-pyfc
12
vulnerability VCID-h2ju-dedu-fqad
13
vulnerability VCID-jnuu-9mt7-jyd5
14
vulnerability VCID-kf6b-mshs-23fa
15
vulnerability VCID-ktnj-j4xu-uufs
16
vulnerability VCID-pcm6-819d-6uhm
17
vulnerability VCID-twdq-g82m-nqcp
18
vulnerability VCID-xgh4-b9yn-dkh4
19
vulnerability VCID-xgk2-yecx-q3ff
20
vulnerability VCID-xjd4-w9bn-mbex
21
vulnerability VCID-xqc4-jf6e-abfg
22
vulnerability VCID-z97t-ffda-vfes
23
vulnerability VCID-zthr-mpwx-1fef
24
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p7
1
url pkg:composer/magento/community-edition@2.4.5-p6
purl pkg:composer/magento/community-edition@2.4.5-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-2t3q-pmg5-qyhn
2
vulnerability VCID-368r-um85-k3d2
3
vulnerability VCID-3s5p-wb18-13ge
4
vulnerability VCID-3uj4-thpr-cue1
5
vulnerability VCID-3ydj-usv4-47fq
6
vulnerability VCID-4b5p-wqtj-7kbe
7
vulnerability VCID-4nqq-nrne-17a2
8
vulnerability VCID-549e-3kmc-cyfw
9
vulnerability VCID-6v47-xgpq-zkgf
10
vulnerability VCID-7bmk-3ab2-9ba6
11
vulnerability VCID-8365-zgh2-w3cc
12
vulnerability VCID-96hr-sbyj-27dw
13
vulnerability VCID-bftg-2sea-57cv
14
vulnerability VCID-dsy7-gm7v-tqc8
15
vulnerability VCID-eban-ja9z-f7ep
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-gxbc-u5mr-f3c9
19
vulnerability VCID-h2ju-dedu-fqad
20
vulnerability VCID-j9e4-4xta-6qc5
21
vulnerability VCID-jeur-3jww-dqee
22
vulnerability VCID-jnuu-9mt7-jyd5
23
vulnerability VCID-jyhf-huep-tya2
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-pcm6-819d-6uhm
26
vulnerability VCID-qbx1-jqke-v7hf
27
vulnerability VCID-qnpc-4r4b-3uhx
28
vulnerability VCID-s7t9-h2jx-9bgr
29
vulnerability VCID-u52p-wrjp-quhk
30
vulnerability VCID-vwpg-z9en-6yej
31
vulnerability VCID-wfdz-b6c4-quhq
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xmby-7b1y-v3cn
34
vulnerability VCID-zthr-mpwx-1fef
35
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p6
2
url pkg:composer/magento/community-edition@2.4.6-p4
purl pkg:composer/magento/community-edition@2.4.6-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-4b5p-wqtj-7kbe
13
vulnerability VCID-549e-3kmc-cyfw
14
vulnerability VCID-5edy-fp8q-97fp
15
vulnerability VCID-6v47-xgpq-zkgf
16
vulnerability VCID-78hy-q8kh-kyh7
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-96hr-sbyj-27dw
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-ctrj-y3d6-a7dv
27
vulnerability VCID-cyy2-3rr3-jkc8
28
vulnerability VCID-d9zc-rh9p-4bde
29
vulnerability VCID-dktm-v3jw-f7de
30
vulnerability VCID-dsy7-gm7v-tqc8
31
vulnerability VCID-dytj-h56v-bke9
32
vulnerability VCID-e2t8-b5yy-zkhn
33
vulnerability VCID-eban-ja9z-f7ep
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-ferd-u8gt-akds
36
vulnerability VCID-frhp-vgpt-g7am
37
vulnerability VCID-gac9-1nnp-67cc
38
vulnerability VCID-ggtj-fbzy-87fx
39
vulnerability VCID-gxbc-u5mr-f3c9
40
vulnerability VCID-gzga-qjaf-kugh
41
vulnerability VCID-j9e4-4xta-6qc5
42
vulnerability VCID-jeur-3jww-dqee
43
vulnerability VCID-jnuu-9mt7-jyd5
44
vulnerability VCID-jyhf-huep-tya2
45
vulnerability VCID-kf6b-mshs-23fa
46
vulnerability VCID-kfct-k5af-n7fu
47
vulnerability VCID-kjc9-vrhf-hfav
48
vulnerability VCID-mccb-abc5-9yfs
49
vulnerability VCID-ngx2-ewzf-xbd4
50
vulnerability VCID-ntst-nee5-63d3
51
vulnerability VCID-pb4n-m8cv-9bb7
52
vulnerability VCID-pfvk-8q6r-e7c5
53
vulnerability VCID-psnm-zaza-tuf9
54
vulnerability VCID-pu8a-r3v2-g7h9
55
vulnerability VCID-qbx1-jqke-v7hf
56
vulnerability VCID-qh9p-8b9r-mufh
57
vulnerability VCID-qnpc-4r4b-3uhx
58
vulnerability VCID-rm7u-jwat-v7f1
59
vulnerability VCID-rw4d-b9yt-mbhz
60
vulnerability VCID-s45p-jru3-w3df
61
vulnerability VCID-s7t9-h2jx-9bgr
62
vulnerability VCID-t4gd-uv9g-ukh5
63
vulnerability VCID-twda-bvut-9bhp
64
vulnerability VCID-u52p-wrjp-quhk
65
vulnerability VCID-u9vz-axk1-fqfn
66
vulnerability VCID-vgz6-nvj3-xqft
67
vulnerability VCID-vwpg-z9en-6yej
68
vulnerability VCID-wfdz-b6c4-quhq
69
vulnerability VCID-wxkj-7zgv-x7bc
70
vulnerability VCID-xgk2-yecx-q3ff
71
vulnerability VCID-xmby-7b1y-v3cn
72
vulnerability VCID-za87-d5x9-wuby
73
vulnerability VCID-zthr-mpwx-1fef
74
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p4
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2024-20720, GHSA-525f-pvj5-vqmq
risk_score 4.1
exploitability 0.5
weighted_severity 8.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pzjb-n7ah-ffcg
22
url VCID-qgse-3kg2-7ke7
vulnerability_id VCID-qgse-3kg2-7ke7
summary Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an XML Injection vulnerability. An attacker with low privileges can trigger a specially crafted script to a security feature bypass. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29289
reference_id
reference_type
scores
0
value 0.00357
scoring_system epss
scoring_elements 0.58495
published_at 2026-06-12T12:55:00Z
1
value 0.00357
scoring_system epss
scoring_elements 0.58511
published_at 2026-06-13T12:55:00Z
2
value 0.00357
scoring_system epss
scoring_elements 0.58383
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29289
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 4.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29289
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 4.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29289
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id apsb23-35.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 4.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-05T18:36:23Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
4
reference_url https://github.com/advisories/GHSA-wh42-8r2w-873x
reference_id GHSA-wh42-8r2w-873x
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wh42-8r2w-873x
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-2tge-6ken-kqge
2
vulnerability VCID-466x-mpt9-gbgy
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-549e-3kmc-cyfw
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-6gtw-hr2w-5fcd
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-8hfe-bt2u-37f9
9
vulnerability VCID-96hr-sbyj-27dw
10
vulnerability VCID-9gb1-p5qf-3kd2
11
vulnerability VCID-afft-etfr-n3ep
12
vulnerability VCID-e9g4-n5c8-6yf9
13
vulnerability VCID-eban-ja9z-f7ep
14
vulnerability VCID-eusf-bc81-9uhv
15
vulnerability VCID-fb5x-afrq-87aj
16
vulnerability VCID-fqkf-67fw-cyb8
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-fz2x-ms14-pkfs
19
vulnerability VCID-gakd-m2af-z7c2
20
vulnerability VCID-gx3s-7cxk-pyfc
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jkrp-j7st-27f3
23
vulnerability VCID-jnuu-9mt7-jyd5
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-ktnj-j4xu-uufs
26
vulnerability VCID-pcm6-819d-6uhm
27
vulnerability VCID-pzjb-n7ah-ffcg
28
vulnerability VCID-q12a-kwpk-yufv
29
vulnerability VCID-qr8w-qwb5-6uag
30
vulnerability VCID-twdq-g82m-nqcp
31
vulnerability VCID-xgh4-b9yn-dkh4
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xjd4-w9bn-mbex
34
vulnerability VCID-xqc4-jf6e-abfg
35
vulnerability VCID-z97t-ffda-vfes
36
vulnerability VCID-zssu-1dmn-sycb
37
vulnerability VCID-zthr-mpwx-1fef
38
vulnerability VCID-zv6m-4py8-3ydq
39
vulnerability VCID-zwem-swqk-1kaz
40
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-2tge-6ken-kqge
4
vulnerability VCID-368r-um85-k3d2
5
vulnerability VCID-3s5p-wb18-13ge
6
vulnerability VCID-3uj4-thpr-cue1
7
vulnerability VCID-3ydj-usv4-47fq
8
vulnerability VCID-466x-mpt9-gbgy
9
vulnerability VCID-4b5p-wqtj-7kbe
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-549e-3kmc-cyfw
12
vulnerability VCID-6gtw-hr2w-5fcd
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-7bmk-3ab2-9ba6
15
vulnerability VCID-8365-zgh2-w3cc
16
vulnerability VCID-8hfe-bt2u-37f9
17
vulnerability VCID-96hr-sbyj-27dw
18
vulnerability VCID-afft-etfr-n3ep
19
vulnerability VCID-bftg-2sea-57cv
20
vulnerability VCID-dsy7-gm7v-tqc8
21
vulnerability VCID-e9g4-n5c8-6yf9
22
vulnerability VCID-eban-ja9z-f7ep
23
vulnerability VCID-eusf-bc81-9uhv
24
vulnerability VCID-fb5x-afrq-87aj
25
vulnerability VCID-frhp-vgpt-g7am
26
vulnerability VCID-fz2x-ms14-pkfs
27
vulnerability VCID-gxbc-u5mr-f3c9
28
vulnerability VCID-h2ju-dedu-fqad
29
vulnerability VCID-j9e4-4xta-6qc5
30
vulnerability VCID-jeur-3jww-dqee
31
vulnerability VCID-jkrp-j7st-27f3
32
vulnerability VCID-jnuu-9mt7-jyd5
33
vulnerability VCID-jyhf-huep-tya2
34
vulnerability VCID-kf6b-mshs-23fa
35
vulnerability VCID-pcm6-819d-6uhm
36
vulnerability VCID-pzjb-n7ah-ffcg
37
vulnerability VCID-q12a-kwpk-yufv
38
vulnerability VCID-qbx1-jqke-v7hf
39
vulnerability VCID-qnpc-4r4b-3uhx
40
vulnerability VCID-qr8w-qwb5-6uag
41
vulnerability VCID-s7t9-h2jx-9bgr
42
vulnerability VCID-u52p-wrjp-quhk
43
vulnerability VCID-vwpg-z9en-6yej
44
vulnerability VCID-wfdz-b6c4-quhq
45
vulnerability VCID-xgk2-yecx-q3ff
46
vulnerability VCID-xmby-7b1y-v3cn
47
vulnerability VCID-zssu-1dmn-sycb
48
vulnerability VCID-zthr-mpwx-1fef
49
vulnerability VCID-zv6m-4py8-3ydq
50
vulnerability VCID-zwem-swqk-1kaz
51
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
2
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-2tge-6ken-kqge
8
vulnerability VCID-313z-h2v4-c3fr
9
vulnerability VCID-368r-um85-k3d2
10
vulnerability VCID-3a8p-9krx-23e8
11
vulnerability VCID-3s5p-wb18-13ge
12
vulnerability VCID-3uj4-thpr-cue1
13
vulnerability VCID-3ydj-usv4-47fq
14
vulnerability VCID-466x-mpt9-gbgy
15
vulnerability VCID-4b5p-wqtj-7kbe
16
vulnerability VCID-4nqq-nrne-17a2
17
vulnerability VCID-53sd-5nuj-e7d9
18
vulnerability VCID-549e-3kmc-cyfw
19
vulnerability VCID-5edy-fp8q-97fp
20
vulnerability VCID-6d1u-exkw-hbfu
21
vulnerability VCID-6gtw-hr2w-5fcd
22
vulnerability VCID-6v47-xgpq-zkgf
23
vulnerability VCID-78hy-q8kh-kyh7
24
vulnerability VCID-7bmk-3ab2-9ba6
25
vulnerability VCID-7j68-gund-4qhp
26
vulnerability VCID-8365-zgh2-w3cc
27
vulnerability VCID-8gwb-c3ck-37f8
28
vulnerability VCID-8hfe-bt2u-37f9
29
vulnerability VCID-96hr-sbyj-27dw
30
vulnerability VCID-9gb1-p5qf-3kd2
31
vulnerability VCID-9gbf-swtt-7bhz
32
vulnerability VCID-a6gj-zm14-aqhq
33
vulnerability VCID-afft-etfr-n3ep
34
vulnerability VCID-ax9q-y1rb-33b2
35
vulnerability VCID-bfp1-cndf-d7d7
36
vulnerability VCID-bftg-2sea-57cv
37
vulnerability VCID-bvfd-gs5b-dyg7
38
vulnerability VCID-ctrj-y3d6-a7dv
39
vulnerability VCID-cyy2-3rr3-jkc8
40
vulnerability VCID-d9zc-rh9p-4bde
41
vulnerability VCID-dktm-v3jw-f7de
42
vulnerability VCID-dsy7-gm7v-tqc8
43
vulnerability VCID-dytj-h56v-bke9
44
vulnerability VCID-e2t8-b5yy-zkhn
45
vulnerability VCID-e9g4-n5c8-6yf9
46
vulnerability VCID-eban-ja9z-f7ep
47
vulnerability VCID-esjc-zzqy-nycf
48
vulnerability VCID-eusf-bc81-9uhv
49
vulnerability VCID-fb5x-afrq-87aj
50
vulnerability VCID-ferd-u8gt-akds
51
vulnerability VCID-fqkf-67fw-cyb8
52
vulnerability VCID-frhp-vgpt-g7am
53
vulnerability VCID-fz2x-ms14-pkfs
54
vulnerability VCID-gac9-1nnp-67cc
55
vulnerability VCID-gakd-m2af-z7c2
56
vulnerability VCID-ggtj-fbzy-87fx
57
vulnerability VCID-gx3s-7cxk-pyfc
58
vulnerability VCID-gxbc-u5mr-f3c9
59
vulnerability VCID-gzga-qjaf-kugh
60
vulnerability VCID-h2ju-dedu-fqad
61
vulnerability VCID-j9e4-4xta-6qc5
62
vulnerability VCID-jc6r-vmnc-r3g9
63
vulnerability VCID-jeur-3jww-dqee
64
vulnerability VCID-jkrp-j7st-27f3
65
vulnerability VCID-jnuu-9mt7-jyd5
66
vulnerability VCID-jyhf-huep-tya2
67
vulnerability VCID-kf6b-mshs-23fa
68
vulnerability VCID-kfct-k5af-n7fu
69
vulnerability VCID-kjc9-vrhf-hfav
70
vulnerability VCID-ktnj-j4xu-uufs
71
vulnerability VCID-kxjv-xm7r-hkhs
72
vulnerability VCID-mccb-abc5-9yfs
73
vulnerability VCID-ngx2-ewzf-xbd4
74
vulnerability VCID-ntst-nee5-63d3
75
vulnerability VCID-pb4n-m8cv-9bb7
76
vulnerability VCID-pcm6-819d-6uhm
77
vulnerability VCID-pfvk-8q6r-e7c5
78
vulnerability VCID-psnm-zaza-tuf9
79
vulnerability VCID-pu8a-r3v2-g7h9
80
vulnerability VCID-pzjb-n7ah-ffcg
81
vulnerability VCID-q12a-kwpk-yufv
82
vulnerability VCID-q68u-w433-tqb9
83
vulnerability VCID-qbx1-jqke-v7hf
84
vulnerability VCID-qh9p-8b9r-mufh
85
vulnerability VCID-qnpc-4r4b-3uhx
86
vulnerability VCID-qr8w-qwb5-6uag
87
vulnerability VCID-rm7u-jwat-v7f1
88
vulnerability VCID-rw4d-b9yt-mbhz
89
vulnerability VCID-s45p-jru3-w3df
90
vulnerability VCID-s7t9-h2jx-9bgr
91
vulnerability VCID-t4gd-uv9g-ukh5
92
vulnerability VCID-twda-bvut-9bhp
93
vulnerability VCID-twdq-g82m-nqcp
94
vulnerability VCID-u52p-wrjp-quhk
95
vulnerability VCID-u9vz-axk1-fqfn
96
vulnerability VCID-vgz6-nvj3-xqft
97
vulnerability VCID-vwpg-z9en-6yej
98
vulnerability VCID-wfdz-b6c4-quhq
99
vulnerability VCID-wxkj-7zgv-x7bc
100
vulnerability VCID-xgh4-b9yn-dkh4
101
vulnerability VCID-xgk2-yecx-q3ff
102
vulnerability VCID-xjd4-w9bn-mbex
103
vulnerability VCID-xmby-7b1y-v3cn
104
vulnerability VCID-xqc4-jf6e-abfg
105
vulnerability VCID-z97t-ffda-vfes
106
vulnerability VCID-za87-d5x9-wuby
107
vulnerability VCID-zssu-1dmn-sycb
108
vulnerability VCID-zthr-mpwx-1fef
109
vulnerability VCID-zv6m-4py8-3ydq
110
vulnerability VCID-zwem-swqk-1kaz
111
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-29289, GHSA-wh42-8r2w-873x
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qgse-3kg2-7ke7
23
url VCID-swsg-c57z-1fe5
vulnerability_id VCID-swsg-c57z-1fe5
summary Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29290
reference_id
reference_type
scores
0
value 0.00146
scoring_system epss
scoring_elements 0.35012
published_at 2026-06-12T12:55:00Z
1
value 0.00146
scoring_system epss
scoring_elements 0.35035
published_at 2026-06-13T12:55:00Z
2
value 0.00146
scoring_system epss
scoring_elements 0.34832
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29290
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29290
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29290
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id apsb23-35.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-05T18:39:03Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
4
reference_url https://github.com/advisories/GHSA-qw5m-vmp3-f553
reference_id GHSA-qw5m-vmp3-f553
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qw5m-vmp3-f553
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-2tge-6ken-kqge
2
vulnerability VCID-466x-mpt9-gbgy
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-549e-3kmc-cyfw
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-6gtw-hr2w-5fcd
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-8hfe-bt2u-37f9
9
vulnerability VCID-96hr-sbyj-27dw
10
vulnerability VCID-9gb1-p5qf-3kd2
11
vulnerability VCID-afft-etfr-n3ep
12
vulnerability VCID-e9g4-n5c8-6yf9
13
vulnerability VCID-eban-ja9z-f7ep
14
vulnerability VCID-eusf-bc81-9uhv
15
vulnerability VCID-fb5x-afrq-87aj
16
vulnerability VCID-fqkf-67fw-cyb8
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-fz2x-ms14-pkfs
19
vulnerability VCID-gakd-m2af-z7c2
20
vulnerability VCID-gx3s-7cxk-pyfc
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jkrp-j7st-27f3
23
vulnerability VCID-jnuu-9mt7-jyd5
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-ktnj-j4xu-uufs
26
vulnerability VCID-pcm6-819d-6uhm
27
vulnerability VCID-pzjb-n7ah-ffcg
28
vulnerability VCID-q12a-kwpk-yufv
29
vulnerability VCID-qr8w-qwb5-6uag
30
vulnerability VCID-twdq-g82m-nqcp
31
vulnerability VCID-xgh4-b9yn-dkh4
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xjd4-w9bn-mbex
34
vulnerability VCID-xqc4-jf6e-abfg
35
vulnerability VCID-z97t-ffda-vfes
36
vulnerability VCID-zssu-1dmn-sycb
37
vulnerability VCID-zthr-mpwx-1fef
38
vulnerability VCID-zv6m-4py8-3ydq
39
vulnerability VCID-zwem-swqk-1kaz
40
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-2tge-6ken-kqge
4
vulnerability VCID-368r-um85-k3d2
5
vulnerability VCID-3s5p-wb18-13ge
6
vulnerability VCID-3uj4-thpr-cue1
7
vulnerability VCID-3ydj-usv4-47fq
8
vulnerability VCID-466x-mpt9-gbgy
9
vulnerability VCID-4b5p-wqtj-7kbe
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-549e-3kmc-cyfw
12
vulnerability VCID-6gtw-hr2w-5fcd
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-7bmk-3ab2-9ba6
15
vulnerability VCID-8365-zgh2-w3cc
16
vulnerability VCID-8hfe-bt2u-37f9
17
vulnerability VCID-96hr-sbyj-27dw
18
vulnerability VCID-afft-etfr-n3ep
19
vulnerability VCID-bftg-2sea-57cv
20
vulnerability VCID-dsy7-gm7v-tqc8
21
vulnerability VCID-e9g4-n5c8-6yf9
22
vulnerability VCID-eban-ja9z-f7ep
23
vulnerability VCID-eusf-bc81-9uhv
24
vulnerability VCID-fb5x-afrq-87aj
25
vulnerability VCID-frhp-vgpt-g7am
26
vulnerability VCID-fz2x-ms14-pkfs
27
vulnerability VCID-gxbc-u5mr-f3c9
28
vulnerability VCID-h2ju-dedu-fqad
29
vulnerability VCID-j9e4-4xta-6qc5
30
vulnerability VCID-jeur-3jww-dqee
31
vulnerability VCID-jkrp-j7st-27f3
32
vulnerability VCID-jnuu-9mt7-jyd5
33
vulnerability VCID-jyhf-huep-tya2
34
vulnerability VCID-kf6b-mshs-23fa
35
vulnerability VCID-pcm6-819d-6uhm
36
vulnerability VCID-pzjb-n7ah-ffcg
37
vulnerability VCID-q12a-kwpk-yufv
38
vulnerability VCID-qbx1-jqke-v7hf
39
vulnerability VCID-qnpc-4r4b-3uhx
40
vulnerability VCID-qr8w-qwb5-6uag
41
vulnerability VCID-s7t9-h2jx-9bgr
42
vulnerability VCID-u52p-wrjp-quhk
43
vulnerability VCID-vwpg-z9en-6yej
44
vulnerability VCID-wfdz-b6c4-quhq
45
vulnerability VCID-xgk2-yecx-q3ff
46
vulnerability VCID-xmby-7b1y-v3cn
47
vulnerability VCID-zssu-1dmn-sycb
48
vulnerability VCID-zthr-mpwx-1fef
49
vulnerability VCID-zv6m-4py8-3ydq
50
vulnerability VCID-zwem-swqk-1kaz
51
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
2
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-2tge-6ken-kqge
8
vulnerability VCID-313z-h2v4-c3fr
9
vulnerability VCID-368r-um85-k3d2
10
vulnerability VCID-3a8p-9krx-23e8
11
vulnerability VCID-3s5p-wb18-13ge
12
vulnerability VCID-3uj4-thpr-cue1
13
vulnerability VCID-3ydj-usv4-47fq
14
vulnerability VCID-466x-mpt9-gbgy
15
vulnerability VCID-4b5p-wqtj-7kbe
16
vulnerability VCID-4nqq-nrne-17a2
17
vulnerability VCID-53sd-5nuj-e7d9
18
vulnerability VCID-549e-3kmc-cyfw
19
vulnerability VCID-5edy-fp8q-97fp
20
vulnerability VCID-6d1u-exkw-hbfu
21
vulnerability VCID-6gtw-hr2w-5fcd
22
vulnerability VCID-6v47-xgpq-zkgf
23
vulnerability VCID-78hy-q8kh-kyh7
24
vulnerability VCID-7bmk-3ab2-9ba6
25
vulnerability VCID-7j68-gund-4qhp
26
vulnerability VCID-8365-zgh2-w3cc
27
vulnerability VCID-8gwb-c3ck-37f8
28
vulnerability VCID-8hfe-bt2u-37f9
29
vulnerability VCID-96hr-sbyj-27dw
30
vulnerability VCID-9gb1-p5qf-3kd2
31
vulnerability VCID-9gbf-swtt-7bhz
32
vulnerability VCID-a6gj-zm14-aqhq
33
vulnerability VCID-afft-etfr-n3ep
34
vulnerability VCID-ax9q-y1rb-33b2
35
vulnerability VCID-bfp1-cndf-d7d7
36
vulnerability VCID-bftg-2sea-57cv
37
vulnerability VCID-bvfd-gs5b-dyg7
38
vulnerability VCID-ctrj-y3d6-a7dv
39
vulnerability VCID-cyy2-3rr3-jkc8
40
vulnerability VCID-d9zc-rh9p-4bde
41
vulnerability VCID-dktm-v3jw-f7de
42
vulnerability VCID-dsy7-gm7v-tqc8
43
vulnerability VCID-dytj-h56v-bke9
44
vulnerability VCID-e2t8-b5yy-zkhn
45
vulnerability VCID-e9g4-n5c8-6yf9
46
vulnerability VCID-eban-ja9z-f7ep
47
vulnerability VCID-esjc-zzqy-nycf
48
vulnerability VCID-eusf-bc81-9uhv
49
vulnerability VCID-fb5x-afrq-87aj
50
vulnerability VCID-ferd-u8gt-akds
51
vulnerability VCID-fqkf-67fw-cyb8
52
vulnerability VCID-frhp-vgpt-g7am
53
vulnerability VCID-fz2x-ms14-pkfs
54
vulnerability VCID-gac9-1nnp-67cc
55
vulnerability VCID-gakd-m2af-z7c2
56
vulnerability VCID-ggtj-fbzy-87fx
57
vulnerability VCID-gx3s-7cxk-pyfc
58
vulnerability VCID-gxbc-u5mr-f3c9
59
vulnerability VCID-gzga-qjaf-kugh
60
vulnerability VCID-h2ju-dedu-fqad
61
vulnerability VCID-j9e4-4xta-6qc5
62
vulnerability VCID-jc6r-vmnc-r3g9
63
vulnerability VCID-jeur-3jww-dqee
64
vulnerability VCID-jkrp-j7st-27f3
65
vulnerability VCID-jnuu-9mt7-jyd5
66
vulnerability VCID-jyhf-huep-tya2
67
vulnerability VCID-kf6b-mshs-23fa
68
vulnerability VCID-kfct-k5af-n7fu
69
vulnerability VCID-kjc9-vrhf-hfav
70
vulnerability VCID-ktnj-j4xu-uufs
71
vulnerability VCID-kxjv-xm7r-hkhs
72
vulnerability VCID-mccb-abc5-9yfs
73
vulnerability VCID-ngx2-ewzf-xbd4
74
vulnerability VCID-ntst-nee5-63d3
75
vulnerability VCID-pb4n-m8cv-9bb7
76
vulnerability VCID-pcm6-819d-6uhm
77
vulnerability VCID-pfvk-8q6r-e7c5
78
vulnerability VCID-psnm-zaza-tuf9
79
vulnerability VCID-pu8a-r3v2-g7h9
80
vulnerability VCID-pzjb-n7ah-ffcg
81
vulnerability VCID-q12a-kwpk-yufv
82
vulnerability VCID-q68u-w433-tqb9
83
vulnerability VCID-qbx1-jqke-v7hf
84
vulnerability VCID-qh9p-8b9r-mufh
85
vulnerability VCID-qnpc-4r4b-3uhx
86
vulnerability VCID-qr8w-qwb5-6uag
87
vulnerability VCID-rm7u-jwat-v7f1
88
vulnerability VCID-rw4d-b9yt-mbhz
89
vulnerability VCID-s45p-jru3-w3df
90
vulnerability VCID-s7t9-h2jx-9bgr
91
vulnerability VCID-t4gd-uv9g-ukh5
92
vulnerability VCID-twda-bvut-9bhp
93
vulnerability VCID-twdq-g82m-nqcp
94
vulnerability VCID-u52p-wrjp-quhk
95
vulnerability VCID-u9vz-axk1-fqfn
96
vulnerability VCID-vgz6-nvj3-xqft
97
vulnerability VCID-vwpg-z9en-6yej
98
vulnerability VCID-wfdz-b6c4-quhq
99
vulnerability VCID-wxkj-7zgv-x7bc
100
vulnerability VCID-xgh4-b9yn-dkh4
101
vulnerability VCID-xgk2-yecx-q3ff
102
vulnerability VCID-xjd4-w9bn-mbex
103
vulnerability VCID-xmby-7b1y-v3cn
104
vulnerability VCID-xqc4-jf6e-abfg
105
vulnerability VCID-z97t-ffda-vfes
106
vulnerability VCID-za87-d5x9-wuby
107
vulnerability VCID-zssu-1dmn-sycb
108
vulnerability VCID-zthr-mpwx-1fef
109
vulnerability VCID-zv6m-4py8-3ydq
110
vulnerability VCID-zwem-swqk-1kaz
111
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-29290, GHSA-qw5m-vmp3-f553
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-swsg-c57z-1fe5
24
url VCID-u52p-wrjp-quhk
vulnerability_id VCID-u52p-wrjp-quhk
summary Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass security features and perform minor integrity changeson behalf of a user. The vulnerability could be exploited by tricking a victim into clicking a link or loading a page that submits a malicious request. Exploitation of this issue requires user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-39408
reference_id
reference_type
scores
0
value 0.00515
scoring_system epss
scoring_elements 0.67045
published_at 2026-06-11T12:55:00Z
1
value 0.00515
scoring_system epss
scoring_elements 0.67151
published_at 2026-06-13T12:55:00Z
2
value 0.00515
scoring_system epss
scoring_elements 0.67137
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-39408
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-61.html
reference_id apsb24-61.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-08-14T14:09:17Z/
url https://helpx.adobe.com/security/products/magento/apsb24-61.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-39408
reference_id CVE-2024-39408
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-39408
4
reference_url https://github.com/advisories/GHSA-4cj6-f32v-6hgx
reference_id GHSA-4cj6-f32v-6hgx
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4cj6-f32v-6hgx
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p10
purl pkg:composer/magento/community-edition@2.4.4-p10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p10
1
url pkg:composer/magento/community-edition@2.4.5-p9
purl pkg:composer/magento/community-edition@2.4.5-p9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-7bmk-3ab2-9ba6
2
vulnerability VCID-eusf-bc81-9uhv
3
vulnerability VCID-h2ju-dedu-fqad
4
vulnerability VCID-pcm6-819d-6uhm
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p9
2
url pkg:composer/magento/community-edition@2.4.6-p7
purl pkg:composer/magento/community-edition@2.4.6-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-5edy-fp8q-97fp
7
vulnerability VCID-78hy-q8kh-kyh7
8
vulnerability VCID-7j68-gund-4qhp
9
vulnerability VCID-8gwb-c3ck-37f8
10
vulnerability VCID-9gbf-swtt-7bhz
11
vulnerability VCID-a6gj-zm14-aqhq
12
vulnerability VCID-ax9q-y1rb-33b2
13
vulnerability VCID-bfp1-cndf-d7d7
14
vulnerability VCID-ctrj-y3d6-a7dv
15
vulnerability VCID-cyy2-3rr3-jkc8
16
vulnerability VCID-d9zc-rh9p-4bde
17
vulnerability VCID-dktm-v3jw-f7de
18
vulnerability VCID-dytj-h56v-bke9
19
vulnerability VCID-e2t8-b5yy-zkhn
20
vulnerability VCID-esjc-zzqy-nycf
21
vulnerability VCID-ferd-u8gt-akds
22
vulnerability VCID-gac9-1nnp-67cc
23
vulnerability VCID-ggtj-fbzy-87fx
24
vulnerability VCID-gzga-qjaf-kugh
25
vulnerability VCID-kfct-k5af-n7fu
26
vulnerability VCID-kjc9-vrhf-hfav
27
vulnerability VCID-mccb-abc5-9yfs
28
vulnerability VCID-ngx2-ewzf-xbd4
29
vulnerability VCID-ntst-nee5-63d3
30
vulnerability VCID-pb4n-m8cv-9bb7
31
vulnerability VCID-pfvk-8q6r-e7c5
32
vulnerability VCID-psnm-zaza-tuf9
33
vulnerability VCID-pu8a-r3v2-g7h9
34
vulnerability VCID-qh9p-8b9r-mufh
35
vulnerability VCID-rm7u-jwat-v7f1
36
vulnerability VCID-rw4d-b9yt-mbhz
37
vulnerability VCID-s45p-jru3-w3df
38
vulnerability VCID-t4gd-uv9g-ukh5
39
vulnerability VCID-twda-bvut-9bhp
40
vulnerability VCID-u9vz-axk1-fqfn
41
vulnerability VCID-vgz6-nvj3-xqft
42
vulnerability VCID-wxkj-7zgv-x7bc
43
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p7
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
4
url pkg:composer/magento/community-edition@2.4.7-p2
purl pkg:composer/magento/community-edition@2.4.7-p2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-313z-h2v4-c3fr
5
vulnerability VCID-3a8p-9krx-23e8
6
vulnerability VCID-4nqq-nrne-17a2
7
vulnerability VCID-53sd-5nuj-e7d9
8
vulnerability VCID-5edy-fp8q-97fp
9
vulnerability VCID-6d1u-exkw-hbfu
10
vulnerability VCID-78hy-q8kh-kyh7
11
vulnerability VCID-7bmk-3ab2-9ba6
12
vulnerability VCID-7j68-gund-4qhp
13
vulnerability VCID-8gwb-c3ck-37f8
14
vulnerability VCID-9gb1-p5qf-3kd2
15
vulnerability VCID-9gbf-swtt-7bhz
16
vulnerability VCID-a6gj-zm14-aqhq
17
vulnerability VCID-ax9q-y1rb-33b2
18
vulnerability VCID-bfp1-cndf-d7d7
19
vulnerability VCID-bvfd-gs5b-dyg7
20
vulnerability VCID-ctrj-y3d6-a7dv
21
vulnerability VCID-cyy2-3rr3-jkc8
22
vulnerability VCID-d9zc-rh9p-4bde
23
vulnerability VCID-dktm-v3jw-f7de
24
vulnerability VCID-dytj-h56v-bke9
25
vulnerability VCID-e2t8-b5yy-zkhn
26
vulnerability VCID-esjc-zzqy-nycf
27
vulnerability VCID-eusf-bc81-9uhv
28
vulnerability VCID-ferd-u8gt-akds
29
vulnerability VCID-fqkf-67fw-cyb8
30
vulnerability VCID-gac9-1nnp-67cc
31
vulnerability VCID-gakd-m2af-z7c2
32
vulnerability VCID-ggtj-fbzy-87fx
33
vulnerability VCID-gx3s-7cxk-pyfc
34
vulnerability VCID-gzga-qjaf-kugh
35
vulnerability VCID-h2ju-dedu-fqad
36
vulnerability VCID-jc6r-vmnc-r3g9
37
vulnerability VCID-kfct-k5af-n7fu
38
vulnerability VCID-kjc9-vrhf-hfav
39
vulnerability VCID-ktnj-j4xu-uufs
40
vulnerability VCID-kxjv-xm7r-hkhs
41
vulnerability VCID-mccb-abc5-9yfs
42
vulnerability VCID-ngx2-ewzf-xbd4
43
vulnerability VCID-ntst-nee5-63d3
44
vulnerability VCID-pb4n-m8cv-9bb7
45
vulnerability VCID-pcm6-819d-6uhm
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-q68u-w433-tqb9
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-rm7u-jwat-v7f1
52
vulnerability VCID-rw4d-b9yt-mbhz
53
vulnerability VCID-s45p-jru3-w3df
54
vulnerability VCID-t4gd-uv9g-ukh5
55
vulnerability VCID-twda-bvut-9bhp
56
vulnerability VCID-twdq-g82m-nqcp
57
vulnerability VCID-u9vz-axk1-fqfn
58
vulnerability VCID-vgz6-nvj3-xqft
59
vulnerability VCID-wxkj-7zgv-x7bc
60
vulnerability VCID-xgh4-b9yn-dkh4
61
vulnerability VCID-xjd4-w9bn-mbex
62
vulnerability VCID-xqc4-jf6e-abfg
63
vulnerability VCID-z97t-ffda-vfes
64
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-p2
aliases CVE-2024-39408, GHSA-4cj6-f32v-6hgx
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u52p-wrjp-quhk
25
url VCID-u7wj-vk3w-sbb8
vulnerability_id VCID-u7wj-vk3w-sbb8
summary Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Business Logic Errors vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29294
reference_id
reference_type
scores
0
value 0.00197
scoring_system epss
scoring_elements 0.41874
published_at 2026-06-12T12:55:00Z
1
value 0.00197
scoring_system epss
scoring_elements 0.41894
published_at 2026-06-13T12:55:00Z
2
value 0.00197
scoring_system epss
scoring_elements 0.41709
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29294
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29294
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29294
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id apsb23-35.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-05T18:36:09Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
4
reference_url https://github.com/advisories/GHSA-28vp-39rf-3q2j
reference_id GHSA-28vp-39rf-3q2j
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-28vp-39rf-3q2j
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-2tge-6ken-kqge
2
vulnerability VCID-466x-mpt9-gbgy
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-549e-3kmc-cyfw
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-6gtw-hr2w-5fcd
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-8hfe-bt2u-37f9
9
vulnerability VCID-96hr-sbyj-27dw
10
vulnerability VCID-9gb1-p5qf-3kd2
11
vulnerability VCID-afft-etfr-n3ep
12
vulnerability VCID-e9g4-n5c8-6yf9
13
vulnerability VCID-eban-ja9z-f7ep
14
vulnerability VCID-eusf-bc81-9uhv
15
vulnerability VCID-fb5x-afrq-87aj
16
vulnerability VCID-fqkf-67fw-cyb8
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-fz2x-ms14-pkfs
19
vulnerability VCID-gakd-m2af-z7c2
20
vulnerability VCID-gx3s-7cxk-pyfc
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jkrp-j7st-27f3
23
vulnerability VCID-jnuu-9mt7-jyd5
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-ktnj-j4xu-uufs
26
vulnerability VCID-pcm6-819d-6uhm
27
vulnerability VCID-pzjb-n7ah-ffcg
28
vulnerability VCID-q12a-kwpk-yufv
29
vulnerability VCID-qr8w-qwb5-6uag
30
vulnerability VCID-twdq-g82m-nqcp
31
vulnerability VCID-xgh4-b9yn-dkh4
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xjd4-w9bn-mbex
34
vulnerability VCID-xqc4-jf6e-abfg
35
vulnerability VCID-z97t-ffda-vfes
36
vulnerability VCID-zssu-1dmn-sycb
37
vulnerability VCID-zthr-mpwx-1fef
38
vulnerability VCID-zv6m-4py8-3ydq
39
vulnerability VCID-zwem-swqk-1kaz
40
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-2tge-6ken-kqge
4
vulnerability VCID-368r-um85-k3d2
5
vulnerability VCID-3s5p-wb18-13ge
6
vulnerability VCID-3uj4-thpr-cue1
7
vulnerability VCID-3ydj-usv4-47fq
8
vulnerability VCID-466x-mpt9-gbgy
9
vulnerability VCID-4b5p-wqtj-7kbe
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-549e-3kmc-cyfw
12
vulnerability VCID-6gtw-hr2w-5fcd
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-7bmk-3ab2-9ba6
15
vulnerability VCID-8365-zgh2-w3cc
16
vulnerability VCID-8hfe-bt2u-37f9
17
vulnerability VCID-96hr-sbyj-27dw
18
vulnerability VCID-afft-etfr-n3ep
19
vulnerability VCID-bftg-2sea-57cv
20
vulnerability VCID-dsy7-gm7v-tqc8
21
vulnerability VCID-e9g4-n5c8-6yf9
22
vulnerability VCID-eban-ja9z-f7ep
23
vulnerability VCID-eusf-bc81-9uhv
24
vulnerability VCID-fb5x-afrq-87aj
25
vulnerability VCID-frhp-vgpt-g7am
26
vulnerability VCID-fz2x-ms14-pkfs
27
vulnerability VCID-gxbc-u5mr-f3c9
28
vulnerability VCID-h2ju-dedu-fqad
29
vulnerability VCID-j9e4-4xta-6qc5
30
vulnerability VCID-jeur-3jww-dqee
31
vulnerability VCID-jkrp-j7st-27f3
32
vulnerability VCID-jnuu-9mt7-jyd5
33
vulnerability VCID-jyhf-huep-tya2
34
vulnerability VCID-kf6b-mshs-23fa
35
vulnerability VCID-pcm6-819d-6uhm
36
vulnerability VCID-pzjb-n7ah-ffcg
37
vulnerability VCID-q12a-kwpk-yufv
38
vulnerability VCID-qbx1-jqke-v7hf
39
vulnerability VCID-qnpc-4r4b-3uhx
40
vulnerability VCID-qr8w-qwb5-6uag
41
vulnerability VCID-s7t9-h2jx-9bgr
42
vulnerability VCID-u52p-wrjp-quhk
43
vulnerability VCID-vwpg-z9en-6yej
44
vulnerability VCID-wfdz-b6c4-quhq
45
vulnerability VCID-xgk2-yecx-q3ff
46
vulnerability VCID-xmby-7b1y-v3cn
47
vulnerability VCID-zssu-1dmn-sycb
48
vulnerability VCID-zthr-mpwx-1fef
49
vulnerability VCID-zv6m-4py8-3ydq
50
vulnerability VCID-zwem-swqk-1kaz
51
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
2
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-2tge-6ken-kqge
8
vulnerability VCID-313z-h2v4-c3fr
9
vulnerability VCID-368r-um85-k3d2
10
vulnerability VCID-3a8p-9krx-23e8
11
vulnerability VCID-3s5p-wb18-13ge
12
vulnerability VCID-3uj4-thpr-cue1
13
vulnerability VCID-3ydj-usv4-47fq
14
vulnerability VCID-466x-mpt9-gbgy
15
vulnerability VCID-4b5p-wqtj-7kbe
16
vulnerability VCID-4nqq-nrne-17a2
17
vulnerability VCID-53sd-5nuj-e7d9
18
vulnerability VCID-549e-3kmc-cyfw
19
vulnerability VCID-5edy-fp8q-97fp
20
vulnerability VCID-6d1u-exkw-hbfu
21
vulnerability VCID-6gtw-hr2w-5fcd
22
vulnerability VCID-6v47-xgpq-zkgf
23
vulnerability VCID-78hy-q8kh-kyh7
24
vulnerability VCID-7bmk-3ab2-9ba6
25
vulnerability VCID-7j68-gund-4qhp
26
vulnerability VCID-8365-zgh2-w3cc
27
vulnerability VCID-8gwb-c3ck-37f8
28
vulnerability VCID-8hfe-bt2u-37f9
29
vulnerability VCID-96hr-sbyj-27dw
30
vulnerability VCID-9gb1-p5qf-3kd2
31
vulnerability VCID-9gbf-swtt-7bhz
32
vulnerability VCID-a6gj-zm14-aqhq
33
vulnerability VCID-afft-etfr-n3ep
34
vulnerability VCID-ax9q-y1rb-33b2
35
vulnerability VCID-bfp1-cndf-d7d7
36
vulnerability VCID-bftg-2sea-57cv
37
vulnerability VCID-bvfd-gs5b-dyg7
38
vulnerability VCID-ctrj-y3d6-a7dv
39
vulnerability VCID-cyy2-3rr3-jkc8
40
vulnerability VCID-d9zc-rh9p-4bde
41
vulnerability VCID-dktm-v3jw-f7de
42
vulnerability VCID-dsy7-gm7v-tqc8
43
vulnerability VCID-dytj-h56v-bke9
44
vulnerability VCID-e2t8-b5yy-zkhn
45
vulnerability VCID-e9g4-n5c8-6yf9
46
vulnerability VCID-eban-ja9z-f7ep
47
vulnerability VCID-esjc-zzqy-nycf
48
vulnerability VCID-eusf-bc81-9uhv
49
vulnerability VCID-fb5x-afrq-87aj
50
vulnerability VCID-ferd-u8gt-akds
51
vulnerability VCID-fqkf-67fw-cyb8
52
vulnerability VCID-frhp-vgpt-g7am
53
vulnerability VCID-fz2x-ms14-pkfs
54
vulnerability VCID-gac9-1nnp-67cc
55
vulnerability VCID-gakd-m2af-z7c2
56
vulnerability VCID-ggtj-fbzy-87fx
57
vulnerability VCID-gx3s-7cxk-pyfc
58
vulnerability VCID-gxbc-u5mr-f3c9
59
vulnerability VCID-gzga-qjaf-kugh
60
vulnerability VCID-h2ju-dedu-fqad
61
vulnerability VCID-j9e4-4xta-6qc5
62
vulnerability VCID-jc6r-vmnc-r3g9
63
vulnerability VCID-jeur-3jww-dqee
64
vulnerability VCID-jkrp-j7st-27f3
65
vulnerability VCID-jnuu-9mt7-jyd5
66
vulnerability VCID-jyhf-huep-tya2
67
vulnerability VCID-kf6b-mshs-23fa
68
vulnerability VCID-kfct-k5af-n7fu
69
vulnerability VCID-kjc9-vrhf-hfav
70
vulnerability VCID-ktnj-j4xu-uufs
71
vulnerability VCID-kxjv-xm7r-hkhs
72
vulnerability VCID-mccb-abc5-9yfs
73
vulnerability VCID-ngx2-ewzf-xbd4
74
vulnerability VCID-ntst-nee5-63d3
75
vulnerability VCID-pb4n-m8cv-9bb7
76
vulnerability VCID-pcm6-819d-6uhm
77
vulnerability VCID-pfvk-8q6r-e7c5
78
vulnerability VCID-psnm-zaza-tuf9
79
vulnerability VCID-pu8a-r3v2-g7h9
80
vulnerability VCID-pzjb-n7ah-ffcg
81
vulnerability VCID-q12a-kwpk-yufv
82
vulnerability VCID-q68u-w433-tqb9
83
vulnerability VCID-qbx1-jqke-v7hf
84
vulnerability VCID-qh9p-8b9r-mufh
85
vulnerability VCID-qnpc-4r4b-3uhx
86
vulnerability VCID-qr8w-qwb5-6uag
87
vulnerability VCID-rm7u-jwat-v7f1
88
vulnerability VCID-rw4d-b9yt-mbhz
89
vulnerability VCID-s45p-jru3-w3df
90
vulnerability VCID-s7t9-h2jx-9bgr
91
vulnerability VCID-t4gd-uv9g-ukh5
92
vulnerability VCID-twda-bvut-9bhp
93
vulnerability VCID-twdq-g82m-nqcp
94
vulnerability VCID-u52p-wrjp-quhk
95
vulnerability VCID-u9vz-axk1-fqfn
96
vulnerability VCID-vgz6-nvj3-xqft
97
vulnerability VCID-vwpg-z9en-6yej
98
vulnerability VCID-wfdz-b6c4-quhq
99
vulnerability VCID-wxkj-7zgv-x7bc
100
vulnerability VCID-xgh4-b9yn-dkh4
101
vulnerability VCID-xgk2-yecx-q3ff
102
vulnerability VCID-xjd4-w9bn-mbex
103
vulnerability VCID-xmby-7b1y-v3cn
104
vulnerability VCID-xqc4-jf6e-abfg
105
vulnerability VCID-z97t-ffda-vfes
106
vulnerability VCID-za87-d5x9-wuby
107
vulnerability VCID-zssu-1dmn-sycb
108
vulnerability VCID-zthr-mpwx-1fef
109
vulnerability VCID-zv6m-4py8-3ydq
110
vulnerability VCID-zwem-swqk-1kaz
111
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-29294, GHSA-28vp-39rf-3q2j
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u7wj-vk3w-sbb8
26
url VCID-v4kk-tszr-puge
vulnerability_id VCID-v4kk-tszr-puge
summary Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Information Exposure vulnerability that could lead to a security feature bypass. An attacker could leverage this vulnerability to leak minor user data. Exploitation of this issue does not require user interaction..
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29287
reference_id
reference_type
scores
0
value 0.00308
scoring_system epss
scoring_elements 0.54509
published_at 2026-06-12T12:55:00Z
1
value 0.00308
scoring_system epss
scoring_elements 0.54524
published_at 2026-06-13T12:55:00Z
2
value 0.00308
scoring_system epss
scoring_elements 0.54383
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29287
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29287
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29287
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id apsb23-35.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-05T18:39:07Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
4
reference_url https://github.com/advisories/GHSA-85m4-g9vq-xpxj
reference_id GHSA-85m4-g9vq-xpxj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-85m4-g9vq-xpxj
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-2tge-6ken-kqge
2
vulnerability VCID-466x-mpt9-gbgy
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-549e-3kmc-cyfw
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-6gtw-hr2w-5fcd
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-8hfe-bt2u-37f9
9
vulnerability VCID-96hr-sbyj-27dw
10
vulnerability VCID-9gb1-p5qf-3kd2
11
vulnerability VCID-afft-etfr-n3ep
12
vulnerability VCID-e9g4-n5c8-6yf9
13
vulnerability VCID-eban-ja9z-f7ep
14
vulnerability VCID-eusf-bc81-9uhv
15
vulnerability VCID-fb5x-afrq-87aj
16
vulnerability VCID-fqkf-67fw-cyb8
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-fz2x-ms14-pkfs
19
vulnerability VCID-gakd-m2af-z7c2
20
vulnerability VCID-gx3s-7cxk-pyfc
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jkrp-j7st-27f3
23
vulnerability VCID-jnuu-9mt7-jyd5
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-ktnj-j4xu-uufs
26
vulnerability VCID-pcm6-819d-6uhm
27
vulnerability VCID-pzjb-n7ah-ffcg
28
vulnerability VCID-q12a-kwpk-yufv
29
vulnerability VCID-qr8w-qwb5-6uag
30
vulnerability VCID-twdq-g82m-nqcp
31
vulnerability VCID-xgh4-b9yn-dkh4
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xjd4-w9bn-mbex
34
vulnerability VCID-xqc4-jf6e-abfg
35
vulnerability VCID-z97t-ffda-vfes
36
vulnerability VCID-zssu-1dmn-sycb
37
vulnerability VCID-zthr-mpwx-1fef
38
vulnerability VCID-zv6m-4py8-3ydq
39
vulnerability VCID-zwem-swqk-1kaz
40
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-2tge-6ken-kqge
4
vulnerability VCID-368r-um85-k3d2
5
vulnerability VCID-3s5p-wb18-13ge
6
vulnerability VCID-3uj4-thpr-cue1
7
vulnerability VCID-3ydj-usv4-47fq
8
vulnerability VCID-466x-mpt9-gbgy
9
vulnerability VCID-4b5p-wqtj-7kbe
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-549e-3kmc-cyfw
12
vulnerability VCID-6gtw-hr2w-5fcd
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-7bmk-3ab2-9ba6
15
vulnerability VCID-8365-zgh2-w3cc
16
vulnerability VCID-8hfe-bt2u-37f9
17
vulnerability VCID-96hr-sbyj-27dw
18
vulnerability VCID-afft-etfr-n3ep
19
vulnerability VCID-bftg-2sea-57cv
20
vulnerability VCID-dsy7-gm7v-tqc8
21
vulnerability VCID-e9g4-n5c8-6yf9
22
vulnerability VCID-eban-ja9z-f7ep
23
vulnerability VCID-eusf-bc81-9uhv
24
vulnerability VCID-fb5x-afrq-87aj
25
vulnerability VCID-frhp-vgpt-g7am
26
vulnerability VCID-fz2x-ms14-pkfs
27
vulnerability VCID-gxbc-u5mr-f3c9
28
vulnerability VCID-h2ju-dedu-fqad
29
vulnerability VCID-j9e4-4xta-6qc5
30
vulnerability VCID-jeur-3jww-dqee
31
vulnerability VCID-jkrp-j7st-27f3
32
vulnerability VCID-jnuu-9mt7-jyd5
33
vulnerability VCID-jyhf-huep-tya2
34
vulnerability VCID-kf6b-mshs-23fa
35
vulnerability VCID-pcm6-819d-6uhm
36
vulnerability VCID-pzjb-n7ah-ffcg
37
vulnerability VCID-q12a-kwpk-yufv
38
vulnerability VCID-qbx1-jqke-v7hf
39
vulnerability VCID-qnpc-4r4b-3uhx
40
vulnerability VCID-qr8w-qwb5-6uag
41
vulnerability VCID-s7t9-h2jx-9bgr
42
vulnerability VCID-u52p-wrjp-quhk
43
vulnerability VCID-vwpg-z9en-6yej
44
vulnerability VCID-wfdz-b6c4-quhq
45
vulnerability VCID-xgk2-yecx-q3ff
46
vulnerability VCID-xmby-7b1y-v3cn
47
vulnerability VCID-zssu-1dmn-sycb
48
vulnerability VCID-zthr-mpwx-1fef
49
vulnerability VCID-zv6m-4py8-3ydq
50
vulnerability VCID-zwem-swqk-1kaz
51
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
2
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-2tge-6ken-kqge
8
vulnerability VCID-313z-h2v4-c3fr
9
vulnerability VCID-368r-um85-k3d2
10
vulnerability VCID-3a8p-9krx-23e8
11
vulnerability VCID-3s5p-wb18-13ge
12
vulnerability VCID-3uj4-thpr-cue1
13
vulnerability VCID-3ydj-usv4-47fq
14
vulnerability VCID-466x-mpt9-gbgy
15
vulnerability VCID-4b5p-wqtj-7kbe
16
vulnerability VCID-4nqq-nrne-17a2
17
vulnerability VCID-53sd-5nuj-e7d9
18
vulnerability VCID-549e-3kmc-cyfw
19
vulnerability VCID-5edy-fp8q-97fp
20
vulnerability VCID-6d1u-exkw-hbfu
21
vulnerability VCID-6gtw-hr2w-5fcd
22
vulnerability VCID-6v47-xgpq-zkgf
23
vulnerability VCID-78hy-q8kh-kyh7
24
vulnerability VCID-7bmk-3ab2-9ba6
25
vulnerability VCID-7j68-gund-4qhp
26
vulnerability VCID-8365-zgh2-w3cc
27
vulnerability VCID-8gwb-c3ck-37f8
28
vulnerability VCID-8hfe-bt2u-37f9
29
vulnerability VCID-96hr-sbyj-27dw
30
vulnerability VCID-9gb1-p5qf-3kd2
31
vulnerability VCID-9gbf-swtt-7bhz
32
vulnerability VCID-a6gj-zm14-aqhq
33
vulnerability VCID-afft-etfr-n3ep
34
vulnerability VCID-ax9q-y1rb-33b2
35
vulnerability VCID-bfp1-cndf-d7d7
36
vulnerability VCID-bftg-2sea-57cv
37
vulnerability VCID-bvfd-gs5b-dyg7
38
vulnerability VCID-ctrj-y3d6-a7dv
39
vulnerability VCID-cyy2-3rr3-jkc8
40
vulnerability VCID-d9zc-rh9p-4bde
41
vulnerability VCID-dktm-v3jw-f7de
42
vulnerability VCID-dsy7-gm7v-tqc8
43
vulnerability VCID-dytj-h56v-bke9
44
vulnerability VCID-e2t8-b5yy-zkhn
45
vulnerability VCID-e9g4-n5c8-6yf9
46
vulnerability VCID-eban-ja9z-f7ep
47
vulnerability VCID-esjc-zzqy-nycf
48
vulnerability VCID-eusf-bc81-9uhv
49
vulnerability VCID-fb5x-afrq-87aj
50
vulnerability VCID-ferd-u8gt-akds
51
vulnerability VCID-fqkf-67fw-cyb8
52
vulnerability VCID-frhp-vgpt-g7am
53
vulnerability VCID-fz2x-ms14-pkfs
54
vulnerability VCID-gac9-1nnp-67cc
55
vulnerability VCID-gakd-m2af-z7c2
56
vulnerability VCID-ggtj-fbzy-87fx
57
vulnerability VCID-gx3s-7cxk-pyfc
58
vulnerability VCID-gxbc-u5mr-f3c9
59
vulnerability VCID-gzga-qjaf-kugh
60
vulnerability VCID-h2ju-dedu-fqad
61
vulnerability VCID-j9e4-4xta-6qc5
62
vulnerability VCID-jc6r-vmnc-r3g9
63
vulnerability VCID-jeur-3jww-dqee
64
vulnerability VCID-jkrp-j7st-27f3
65
vulnerability VCID-jnuu-9mt7-jyd5
66
vulnerability VCID-jyhf-huep-tya2
67
vulnerability VCID-kf6b-mshs-23fa
68
vulnerability VCID-kfct-k5af-n7fu
69
vulnerability VCID-kjc9-vrhf-hfav
70
vulnerability VCID-ktnj-j4xu-uufs
71
vulnerability VCID-kxjv-xm7r-hkhs
72
vulnerability VCID-mccb-abc5-9yfs
73
vulnerability VCID-ngx2-ewzf-xbd4
74
vulnerability VCID-ntst-nee5-63d3
75
vulnerability VCID-pb4n-m8cv-9bb7
76
vulnerability VCID-pcm6-819d-6uhm
77
vulnerability VCID-pfvk-8q6r-e7c5
78
vulnerability VCID-psnm-zaza-tuf9
79
vulnerability VCID-pu8a-r3v2-g7h9
80
vulnerability VCID-pzjb-n7ah-ffcg
81
vulnerability VCID-q12a-kwpk-yufv
82
vulnerability VCID-q68u-w433-tqb9
83
vulnerability VCID-qbx1-jqke-v7hf
84
vulnerability VCID-qh9p-8b9r-mufh
85
vulnerability VCID-qnpc-4r4b-3uhx
86
vulnerability VCID-qr8w-qwb5-6uag
87
vulnerability VCID-rm7u-jwat-v7f1
88
vulnerability VCID-rw4d-b9yt-mbhz
89
vulnerability VCID-s45p-jru3-w3df
90
vulnerability VCID-s7t9-h2jx-9bgr
91
vulnerability VCID-t4gd-uv9g-ukh5
92
vulnerability VCID-twda-bvut-9bhp
93
vulnerability VCID-twdq-g82m-nqcp
94
vulnerability VCID-u52p-wrjp-quhk
95
vulnerability VCID-u9vz-axk1-fqfn
96
vulnerability VCID-vgz6-nvj3-xqft
97
vulnerability VCID-vwpg-z9en-6yej
98
vulnerability VCID-wfdz-b6c4-quhq
99
vulnerability VCID-wxkj-7zgv-x7bc
100
vulnerability VCID-xgh4-b9yn-dkh4
101
vulnerability VCID-xgk2-yecx-q3ff
102
vulnerability VCID-xjd4-w9bn-mbex
103
vulnerability VCID-xmby-7b1y-v3cn
104
vulnerability VCID-xqc4-jf6e-abfg
105
vulnerability VCID-z97t-ffda-vfes
106
vulnerability VCID-za87-d5x9-wuby
107
vulnerability VCID-zssu-1dmn-sycb
108
vulnerability VCID-zthr-mpwx-1fef
109
vulnerability VCID-zv6m-4py8-3ydq
110
vulnerability VCID-zwem-swqk-1kaz
111
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-29287, GHSA-85m4-g9vq-xpxj
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v4kk-tszr-puge
27
url VCID-xgk2-yecx-q3ff
vulnerability_id VCID-xgk2-yecx-q3ff
summary Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34102
reference_id
reference_type
scores
0
value 0.94171
scoring_system epss
scoring_elements 0.99921
published_at 2026-06-13T12:55:00Z
1
value 0.94171
scoring_system epss
scoring_elements 0.9992
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34102
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
3
reference_url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
4
reference_url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
5
reference_url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482#diff-84a0773a6287fbbaadf3b9103f4a137fc0b6946de2437ddfd6f60a0722cf8d23
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482#diff-84a0773a6287fbbaadf3b9103f4a137fc0b6946de2437ddfd6f60a0722cf8d23
6
reference_url https://helpx.adobe.com/security/products/magento/apsb24-40.html
reference_id apsb24-40.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-07-18T03:55:19Z/
url https://helpx.adobe.com/security/products/magento/apsb24-40.html
7
reference_url https://www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102
reference_id cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
2
value Act
scoring_system ssvc
scoring_elements SSVCv2/E:A/A:Y/T:T/P:M/B:A/M:M/D:C/2024-07-18T03:55:19Z/
url https://www.vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102
8
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34102
reference_id CVE-2024-34102
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34102
9
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2024-34102.yaml
reference_id CVE-2024-34102.YAML
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2024-34102.yaml
10
reference_url https://github.com/advisories/GHSA-m8cj-3v68-3cxj
reference_id GHSA-m8cj-3v68-3cxj
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m8cj-3v68-3cxj
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p9
purl pkg:composer/magento/community-edition@2.4.4-p9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gakd-m2af-z7c2
7
vulnerability VCID-gx3s-7cxk-pyfc
8
vulnerability VCID-h2ju-dedu-fqad
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-xgh4-b9yn-dkh4
13
vulnerability VCID-xjd4-w9bn-mbex
14
vulnerability VCID-xqc4-jf6e-abfg
15
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p9
1
url pkg:composer/magento/community-edition@2.4.5-p8
purl pkg:composer/magento/community-edition@2.4.5-p8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-2t3q-pmg5-qyhn
2
vulnerability VCID-368r-um85-k3d2
3
vulnerability VCID-3s5p-wb18-13ge
4
vulnerability VCID-3uj4-thpr-cue1
5
vulnerability VCID-3ydj-usv4-47fq
6
vulnerability VCID-4b5p-wqtj-7kbe
7
vulnerability VCID-4nqq-nrne-17a2
8
vulnerability VCID-6v47-xgpq-zkgf
9
vulnerability VCID-7bmk-3ab2-9ba6
10
vulnerability VCID-8365-zgh2-w3cc
11
vulnerability VCID-bftg-2sea-57cv
12
vulnerability VCID-dsy7-gm7v-tqc8
13
vulnerability VCID-eusf-bc81-9uhv
14
vulnerability VCID-gxbc-u5mr-f3c9
15
vulnerability VCID-h2ju-dedu-fqad
16
vulnerability VCID-j9e4-4xta-6qc5
17
vulnerability VCID-jeur-3jww-dqee
18
vulnerability VCID-jyhf-huep-tya2
19
vulnerability VCID-pcm6-819d-6uhm
20
vulnerability VCID-qbx1-jqke-v7hf
21
vulnerability VCID-qnpc-4r4b-3uhx
22
vulnerability VCID-s7t9-h2jx-9bgr
23
vulnerability VCID-u52p-wrjp-quhk
24
vulnerability VCID-vwpg-z9en-6yej
25
vulnerability VCID-wfdz-b6c4-quhq
26
vulnerability VCID-xmby-7b1y-v3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p8
2
url pkg:composer/magento/community-edition@2.4.6-p6
purl pkg:composer/magento/community-edition@2.4.6-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-4b5p-wqtj-7kbe
13
vulnerability VCID-5edy-fp8q-97fp
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-9gbf-swtt-7bhz
20
vulnerability VCID-a6gj-zm14-aqhq
21
vulnerability VCID-ax9q-y1rb-33b2
22
vulnerability VCID-bfp1-cndf-d7d7
23
vulnerability VCID-bftg-2sea-57cv
24
vulnerability VCID-ctrj-y3d6-a7dv
25
vulnerability VCID-cyy2-3rr3-jkc8
26
vulnerability VCID-d9zc-rh9p-4bde
27
vulnerability VCID-dktm-v3jw-f7de
28
vulnerability VCID-dsy7-gm7v-tqc8
29
vulnerability VCID-dytj-h56v-bke9
30
vulnerability VCID-e2t8-b5yy-zkhn
31
vulnerability VCID-esjc-zzqy-nycf
32
vulnerability VCID-ferd-u8gt-akds
33
vulnerability VCID-gac9-1nnp-67cc
34
vulnerability VCID-ggtj-fbzy-87fx
35
vulnerability VCID-gxbc-u5mr-f3c9
36
vulnerability VCID-gzga-qjaf-kugh
37
vulnerability VCID-j9e4-4xta-6qc5
38
vulnerability VCID-jeur-3jww-dqee
39
vulnerability VCID-jyhf-huep-tya2
40
vulnerability VCID-kfct-k5af-n7fu
41
vulnerability VCID-kjc9-vrhf-hfav
42
vulnerability VCID-mccb-abc5-9yfs
43
vulnerability VCID-ngx2-ewzf-xbd4
44
vulnerability VCID-ntst-nee5-63d3
45
vulnerability VCID-pb4n-m8cv-9bb7
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-qbx1-jqke-v7hf
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-qnpc-4r4b-3uhx
52
vulnerability VCID-rm7u-jwat-v7f1
53
vulnerability VCID-rw4d-b9yt-mbhz
54
vulnerability VCID-s45p-jru3-w3df
55
vulnerability VCID-s7t9-h2jx-9bgr
56
vulnerability VCID-t4gd-uv9g-ukh5
57
vulnerability VCID-twda-bvut-9bhp
58
vulnerability VCID-u52p-wrjp-quhk
59
vulnerability VCID-u9vz-axk1-fqfn
60
vulnerability VCID-vgz6-nvj3-xqft
61
vulnerability VCID-vwpg-z9en-6yej
62
vulnerability VCID-wfdz-b6c4-quhq
63
vulnerability VCID-wxkj-7zgv-x7bc
64
vulnerability VCID-xmby-7b1y-v3cn
65
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p6
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2024-34102, GHSA-m8cj-3v68-3cxj
risk_score 10.0
exploitability 2.0
weighted_severity 9.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xgk2-yecx-q3ff
28
url VCID-xrwz-zqgd-7yc5
vulnerability_id VCID-xrwz-zqgd-7yc5
summary Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-29295
reference_id
reference_type
scores
0
value 0.0012
scoring_system epss
scoring_elements 0.30792
published_at 2026-06-12T12:55:00Z
1
value 0.0012
scoring_system epss
scoring_elements 0.3081
published_at 2026-06-13T12:55:00Z
2
value 0.0012
scoring_system epss
scoring_elements 0.30594
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-29295
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-29295
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-29295
3
reference_url https://helpx.adobe.com/security/products/magento/apsb23-35.html
reference_id apsb23-35.html
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value 1.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U
2
value LOW
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-05T18:36:06Z/
url https://helpx.adobe.com/security/products/magento/apsb23-35.html
4
reference_url https://github.com/advisories/GHSA-354h-fpmq-68v7
reference_id GHSA-354h-fpmq-68v7
reference_type
scores
0
value LOW
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-354h-fpmq-68v7
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p4
purl pkg:composer/magento/community-edition@2.4.4-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1bw2-wubb-hqdf
1
vulnerability VCID-2tge-6ken-kqge
2
vulnerability VCID-466x-mpt9-gbgy
3
vulnerability VCID-4nqq-nrne-17a2
4
vulnerability VCID-549e-3kmc-cyfw
5
vulnerability VCID-6d1u-exkw-hbfu
6
vulnerability VCID-6gtw-hr2w-5fcd
7
vulnerability VCID-7bmk-3ab2-9ba6
8
vulnerability VCID-8hfe-bt2u-37f9
9
vulnerability VCID-96hr-sbyj-27dw
10
vulnerability VCID-9gb1-p5qf-3kd2
11
vulnerability VCID-afft-etfr-n3ep
12
vulnerability VCID-e9g4-n5c8-6yf9
13
vulnerability VCID-eban-ja9z-f7ep
14
vulnerability VCID-eusf-bc81-9uhv
15
vulnerability VCID-fb5x-afrq-87aj
16
vulnerability VCID-fqkf-67fw-cyb8
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-fz2x-ms14-pkfs
19
vulnerability VCID-gakd-m2af-z7c2
20
vulnerability VCID-gx3s-7cxk-pyfc
21
vulnerability VCID-h2ju-dedu-fqad
22
vulnerability VCID-jkrp-j7st-27f3
23
vulnerability VCID-jnuu-9mt7-jyd5
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-ktnj-j4xu-uufs
26
vulnerability VCID-pcm6-819d-6uhm
27
vulnerability VCID-pzjb-n7ah-ffcg
28
vulnerability VCID-q12a-kwpk-yufv
29
vulnerability VCID-qr8w-qwb5-6uag
30
vulnerability VCID-twdq-g82m-nqcp
31
vulnerability VCID-xgh4-b9yn-dkh4
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xjd4-w9bn-mbex
34
vulnerability VCID-xqc4-jf6e-abfg
35
vulnerability VCID-z97t-ffda-vfes
36
vulnerability VCID-zssu-1dmn-sycb
37
vulnerability VCID-zthr-mpwx-1fef
38
vulnerability VCID-zv6m-4py8-3ydq
39
vulnerability VCID-zwem-swqk-1kaz
40
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p4
1
url pkg:composer/magento/community-edition@2.4.5-p3
purl pkg:composer/magento/community-edition@2.4.5-p3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-1bw2-wubb-hqdf
2
vulnerability VCID-2t3q-pmg5-qyhn
3
vulnerability VCID-2tge-6ken-kqge
4
vulnerability VCID-368r-um85-k3d2
5
vulnerability VCID-3s5p-wb18-13ge
6
vulnerability VCID-3uj4-thpr-cue1
7
vulnerability VCID-3ydj-usv4-47fq
8
vulnerability VCID-466x-mpt9-gbgy
9
vulnerability VCID-4b5p-wqtj-7kbe
10
vulnerability VCID-4nqq-nrne-17a2
11
vulnerability VCID-549e-3kmc-cyfw
12
vulnerability VCID-6gtw-hr2w-5fcd
13
vulnerability VCID-6v47-xgpq-zkgf
14
vulnerability VCID-7bmk-3ab2-9ba6
15
vulnerability VCID-8365-zgh2-w3cc
16
vulnerability VCID-8hfe-bt2u-37f9
17
vulnerability VCID-96hr-sbyj-27dw
18
vulnerability VCID-afft-etfr-n3ep
19
vulnerability VCID-bftg-2sea-57cv
20
vulnerability VCID-dsy7-gm7v-tqc8
21
vulnerability VCID-e9g4-n5c8-6yf9
22
vulnerability VCID-eban-ja9z-f7ep
23
vulnerability VCID-eusf-bc81-9uhv
24
vulnerability VCID-fb5x-afrq-87aj
25
vulnerability VCID-frhp-vgpt-g7am
26
vulnerability VCID-fz2x-ms14-pkfs
27
vulnerability VCID-gxbc-u5mr-f3c9
28
vulnerability VCID-h2ju-dedu-fqad
29
vulnerability VCID-j9e4-4xta-6qc5
30
vulnerability VCID-jeur-3jww-dqee
31
vulnerability VCID-jkrp-j7st-27f3
32
vulnerability VCID-jnuu-9mt7-jyd5
33
vulnerability VCID-jyhf-huep-tya2
34
vulnerability VCID-kf6b-mshs-23fa
35
vulnerability VCID-pcm6-819d-6uhm
36
vulnerability VCID-pzjb-n7ah-ffcg
37
vulnerability VCID-q12a-kwpk-yufv
38
vulnerability VCID-qbx1-jqke-v7hf
39
vulnerability VCID-qnpc-4r4b-3uhx
40
vulnerability VCID-qr8w-qwb5-6uag
41
vulnerability VCID-s7t9-h2jx-9bgr
42
vulnerability VCID-u52p-wrjp-quhk
43
vulnerability VCID-vwpg-z9en-6yej
44
vulnerability VCID-wfdz-b6c4-quhq
45
vulnerability VCID-xgk2-yecx-q3ff
46
vulnerability VCID-xmby-7b1y-v3cn
47
vulnerability VCID-zssu-1dmn-sycb
48
vulnerability VCID-zthr-mpwx-1fef
49
vulnerability VCID-zv6m-4py8-3ydq
50
vulnerability VCID-zwem-swqk-1kaz
51
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p3
2
url pkg:composer/magento/community-edition@2.4.6-p1
purl pkg:composer/magento/community-edition@2.4.6-p1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1bw2-wubb-hqdf
4
vulnerability VCID-1mpb-gzr2-53ar
5
vulnerability VCID-1vq9-br2m-dbby
6
vulnerability VCID-2t3q-pmg5-qyhn
7
vulnerability VCID-2tge-6ken-kqge
8
vulnerability VCID-313z-h2v4-c3fr
9
vulnerability VCID-368r-um85-k3d2
10
vulnerability VCID-3a8p-9krx-23e8
11
vulnerability VCID-3s5p-wb18-13ge
12
vulnerability VCID-3uj4-thpr-cue1
13
vulnerability VCID-3ydj-usv4-47fq
14
vulnerability VCID-466x-mpt9-gbgy
15
vulnerability VCID-4b5p-wqtj-7kbe
16
vulnerability VCID-4nqq-nrne-17a2
17
vulnerability VCID-53sd-5nuj-e7d9
18
vulnerability VCID-549e-3kmc-cyfw
19
vulnerability VCID-5edy-fp8q-97fp
20
vulnerability VCID-6d1u-exkw-hbfu
21
vulnerability VCID-6gtw-hr2w-5fcd
22
vulnerability VCID-6v47-xgpq-zkgf
23
vulnerability VCID-78hy-q8kh-kyh7
24
vulnerability VCID-7bmk-3ab2-9ba6
25
vulnerability VCID-7j68-gund-4qhp
26
vulnerability VCID-8365-zgh2-w3cc
27
vulnerability VCID-8gwb-c3ck-37f8
28
vulnerability VCID-8hfe-bt2u-37f9
29
vulnerability VCID-96hr-sbyj-27dw
30
vulnerability VCID-9gb1-p5qf-3kd2
31
vulnerability VCID-9gbf-swtt-7bhz
32
vulnerability VCID-a6gj-zm14-aqhq
33
vulnerability VCID-afft-etfr-n3ep
34
vulnerability VCID-ax9q-y1rb-33b2
35
vulnerability VCID-bfp1-cndf-d7d7
36
vulnerability VCID-bftg-2sea-57cv
37
vulnerability VCID-bvfd-gs5b-dyg7
38
vulnerability VCID-ctrj-y3d6-a7dv
39
vulnerability VCID-cyy2-3rr3-jkc8
40
vulnerability VCID-d9zc-rh9p-4bde
41
vulnerability VCID-dktm-v3jw-f7de
42
vulnerability VCID-dsy7-gm7v-tqc8
43
vulnerability VCID-dytj-h56v-bke9
44
vulnerability VCID-e2t8-b5yy-zkhn
45
vulnerability VCID-e9g4-n5c8-6yf9
46
vulnerability VCID-eban-ja9z-f7ep
47
vulnerability VCID-esjc-zzqy-nycf
48
vulnerability VCID-eusf-bc81-9uhv
49
vulnerability VCID-fb5x-afrq-87aj
50
vulnerability VCID-ferd-u8gt-akds
51
vulnerability VCID-fqkf-67fw-cyb8
52
vulnerability VCID-frhp-vgpt-g7am
53
vulnerability VCID-fz2x-ms14-pkfs
54
vulnerability VCID-gac9-1nnp-67cc
55
vulnerability VCID-gakd-m2af-z7c2
56
vulnerability VCID-ggtj-fbzy-87fx
57
vulnerability VCID-gx3s-7cxk-pyfc
58
vulnerability VCID-gxbc-u5mr-f3c9
59
vulnerability VCID-gzga-qjaf-kugh
60
vulnerability VCID-h2ju-dedu-fqad
61
vulnerability VCID-j9e4-4xta-6qc5
62
vulnerability VCID-jc6r-vmnc-r3g9
63
vulnerability VCID-jeur-3jww-dqee
64
vulnerability VCID-jkrp-j7st-27f3
65
vulnerability VCID-jnuu-9mt7-jyd5
66
vulnerability VCID-jyhf-huep-tya2
67
vulnerability VCID-kf6b-mshs-23fa
68
vulnerability VCID-kfct-k5af-n7fu
69
vulnerability VCID-kjc9-vrhf-hfav
70
vulnerability VCID-ktnj-j4xu-uufs
71
vulnerability VCID-kxjv-xm7r-hkhs
72
vulnerability VCID-mccb-abc5-9yfs
73
vulnerability VCID-ngx2-ewzf-xbd4
74
vulnerability VCID-ntst-nee5-63d3
75
vulnerability VCID-pb4n-m8cv-9bb7
76
vulnerability VCID-pcm6-819d-6uhm
77
vulnerability VCID-pfvk-8q6r-e7c5
78
vulnerability VCID-psnm-zaza-tuf9
79
vulnerability VCID-pu8a-r3v2-g7h9
80
vulnerability VCID-pzjb-n7ah-ffcg
81
vulnerability VCID-q12a-kwpk-yufv
82
vulnerability VCID-q68u-w433-tqb9
83
vulnerability VCID-qbx1-jqke-v7hf
84
vulnerability VCID-qh9p-8b9r-mufh
85
vulnerability VCID-qnpc-4r4b-3uhx
86
vulnerability VCID-qr8w-qwb5-6uag
87
vulnerability VCID-rm7u-jwat-v7f1
88
vulnerability VCID-rw4d-b9yt-mbhz
89
vulnerability VCID-s45p-jru3-w3df
90
vulnerability VCID-s7t9-h2jx-9bgr
91
vulnerability VCID-t4gd-uv9g-ukh5
92
vulnerability VCID-twda-bvut-9bhp
93
vulnerability VCID-twdq-g82m-nqcp
94
vulnerability VCID-u52p-wrjp-quhk
95
vulnerability VCID-u9vz-axk1-fqfn
96
vulnerability VCID-vgz6-nvj3-xqft
97
vulnerability VCID-vwpg-z9en-6yej
98
vulnerability VCID-wfdz-b6c4-quhq
99
vulnerability VCID-wxkj-7zgv-x7bc
100
vulnerability VCID-xgh4-b9yn-dkh4
101
vulnerability VCID-xgk2-yecx-q3ff
102
vulnerability VCID-xjd4-w9bn-mbex
103
vulnerability VCID-xmby-7b1y-v3cn
104
vulnerability VCID-xqc4-jf6e-abfg
105
vulnerability VCID-z97t-ffda-vfes
106
vulnerability VCID-za87-d5x9-wuby
107
vulnerability VCID-zssu-1dmn-sycb
108
vulnerability VCID-zthr-mpwx-1fef
109
vulnerability VCID-zv6m-4py8-3ydq
110
vulnerability VCID-zwem-swqk-1kaz
111
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p1
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2023-29295, GHSA-354h-fpmq-68v7
risk_score 1.9
exploitability 0.5
weighted_severity 3.9
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xrwz-zqgd-7yc5
29
url VCID-zthr-mpwx-1fef
vulnerability_id VCID-zthr-mpwx-1fef
summary Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction..
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34111
reference_id
reference_type
scores
0
value 0.00759
scoring_system epss
scoring_elements 0.73857
published_at 2026-06-13T12:55:00Z
1
value 0.00759
scoring_system epss
scoring_elements 0.73767
published_at 2026-06-11T12:55:00Z
2
value 0.00759
scoring_system epss
scoring_elements 0.73841
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34111
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
3
reference_url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
4
reference_url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
5
reference_url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
6
reference_url https://helpx.adobe.com/security/products/magento/apsb24-40.html
reference_id apsb24-40.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-06-13T21:18:03Z/
url https://helpx.adobe.com/security/products/magento/apsb24-40.html
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34111
reference_id CVE-2024-34111
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34111
8
reference_url https://github.com/advisories/GHSA-jmqp-r3gg-6jh3
reference_id GHSA-jmqp-r3gg-6jh3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jmqp-r3gg-6jh3
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p9
purl pkg:composer/magento/community-edition@2.4.4-p9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gakd-m2af-z7c2
7
vulnerability VCID-gx3s-7cxk-pyfc
8
vulnerability VCID-h2ju-dedu-fqad
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-xgh4-b9yn-dkh4
13
vulnerability VCID-xjd4-w9bn-mbex
14
vulnerability VCID-xqc4-jf6e-abfg
15
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p9
1
url pkg:composer/magento/community-edition@2.4.5-p8
purl pkg:composer/magento/community-edition@2.4.5-p8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-2t3q-pmg5-qyhn
2
vulnerability VCID-368r-um85-k3d2
3
vulnerability VCID-3s5p-wb18-13ge
4
vulnerability VCID-3uj4-thpr-cue1
5
vulnerability VCID-3ydj-usv4-47fq
6
vulnerability VCID-4b5p-wqtj-7kbe
7
vulnerability VCID-4nqq-nrne-17a2
8
vulnerability VCID-6v47-xgpq-zkgf
9
vulnerability VCID-7bmk-3ab2-9ba6
10
vulnerability VCID-8365-zgh2-w3cc
11
vulnerability VCID-bftg-2sea-57cv
12
vulnerability VCID-dsy7-gm7v-tqc8
13
vulnerability VCID-eusf-bc81-9uhv
14
vulnerability VCID-gxbc-u5mr-f3c9
15
vulnerability VCID-h2ju-dedu-fqad
16
vulnerability VCID-j9e4-4xta-6qc5
17
vulnerability VCID-jeur-3jww-dqee
18
vulnerability VCID-jyhf-huep-tya2
19
vulnerability VCID-pcm6-819d-6uhm
20
vulnerability VCID-qbx1-jqke-v7hf
21
vulnerability VCID-qnpc-4r4b-3uhx
22
vulnerability VCID-s7t9-h2jx-9bgr
23
vulnerability VCID-u52p-wrjp-quhk
24
vulnerability VCID-vwpg-z9en-6yej
25
vulnerability VCID-wfdz-b6c4-quhq
26
vulnerability VCID-xmby-7b1y-v3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p8
2
url pkg:composer/magento/community-edition@2.4.6-p6
purl pkg:composer/magento/community-edition@2.4.6-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-4b5p-wqtj-7kbe
13
vulnerability VCID-5edy-fp8q-97fp
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-9gbf-swtt-7bhz
20
vulnerability VCID-a6gj-zm14-aqhq
21
vulnerability VCID-ax9q-y1rb-33b2
22
vulnerability VCID-bfp1-cndf-d7d7
23
vulnerability VCID-bftg-2sea-57cv
24
vulnerability VCID-ctrj-y3d6-a7dv
25
vulnerability VCID-cyy2-3rr3-jkc8
26
vulnerability VCID-d9zc-rh9p-4bde
27
vulnerability VCID-dktm-v3jw-f7de
28
vulnerability VCID-dsy7-gm7v-tqc8
29
vulnerability VCID-dytj-h56v-bke9
30
vulnerability VCID-e2t8-b5yy-zkhn
31
vulnerability VCID-esjc-zzqy-nycf
32
vulnerability VCID-ferd-u8gt-akds
33
vulnerability VCID-gac9-1nnp-67cc
34
vulnerability VCID-ggtj-fbzy-87fx
35
vulnerability VCID-gxbc-u5mr-f3c9
36
vulnerability VCID-gzga-qjaf-kugh
37
vulnerability VCID-j9e4-4xta-6qc5
38
vulnerability VCID-jeur-3jww-dqee
39
vulnerability VCID-jyhf-huep-tya2
40
vulnerability VCID-kfct-k5af-n7fu
41
vulnerability VCID-kjc9-vrhf-hfav
42
vulnerability VCID-mccb-abc5-9yfs
43
vulnerability VCID-ngx2-ewzf-xbd4
44
vulnerability VCID-ntst-nee5-63d3
45
vulnerability VCID-pb4n-m8cv-9bb7
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-qbx1-jqke-v7hf
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-qnpc-4r4b-3uhx
52
vulnerability VCID-rm7u-jwat-v7f1
53
vulnerability VCID-rw4d-b9yt-mbhz
54
vulnerability VCID-s45p-jru3-w3df
55
vulnerability VCID-s7t9-h2jx-9bgr
56
vulnerability VCID-t4gd-uv9g-ukh5
57
vulnerability VCID-twda-bvut-9bhp
58
vulnerability VCID-u52p-wrjp-quhk
59
vulnerability VCID-u9vz-axk1-fqfn
60
vulnerability VCID-vgz6-nvj3-xqft
61
vulnerability VCID-vwpg-z9en-6yej
62
vulnerability VCID-wfdz-b6c4-quhq
63
vulnerability VCID-wxkj-7zgv-x7bc
64
vulnerability VCID-xmby-7b1y-v3cn
65
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p6
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2024-34111, GHSA-jmqp-r3gg-6jh3
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zthr-mpwx-1fef
30
url VCID-zv6m-4py8-3ydq
vulnerability_id VCID-zv6m-4py8-3ydq
summary Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an admin attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-34105
reference_id
reference_type
scores
0
value 0.01961
scoring_system epss
scoring_elements 0.83955
published_at 2026-06-13T12:55:00Z
1
value 0.01961
scoring_system epss
scoring_elements 0.8389
published_at 2026-06-11T12:55:00Z
2
value 0.01961
scoring_system epss
scoring_elements 0.83947
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-34105
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/30877fce83b793f71421c47347885cf076e81799
3
reference_url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/a3c6d6e5e95e63031e4df26cfcf76feace7549c2
4
reference_url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/c5c538810b87449886f4669cb8abbe8e5593c83c
5
reference_url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2/commit/d10435b11ada4e502dca7539f8fd31d059d3c482
6
reference_url https://helpx.adobe.com/security/products/magento/apsb24-40.html
reference_id apsb24-40.html
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-06-13T16:04:12Z/
url https://helpx.adobe.com/security/products/magento/apsb24-40.html
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-34105
reference_id CVE-2024-34105
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-34105
8
reference_url https://github.com/advisories/GHSA-5632-wq7m-gfq9
reference_id GHSA-5632-wq7m-gfq9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5632-wq7m-gfq9
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p9
purl pkg:composer/magento/community-edition@2.4.4-p9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-6d1u-exkw-hbfu
2
vulnerability VCID-7bmk-3ab2-9ba6
3
vulnerability VCID-9gb1-p5qf-3kd2
4
vulnerability VCID-eusf-bc81-9uhv
5
vulnerability VCID-fqkf-67fw-cyb8
6
vulnerability VCID-gakd-m2af-z7c2
7
vulnerability VCID-gx3s-7cxk-pyfc
8
vulnerability VCID-h2ju-dedu-fqad
9
vulnerability VCID-ktnj-j4xu-uufs
10
vulnerability VCID-pcm6-819d-6uhm
11
vulnerability VCID-twdq-g82m-nqcp
12
vulnerability VCID-xgh4-b9yn-dkh4
13
vulnerability VCID-xjd4-w9bn-mbex
14
vulnerability VCID-xqc4-jf6e-abfg
15
vulnerability VCID-z97t-ffda-vfes
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p9
1
url pkg:composer/magento/community-edition@2.4.5-p8
purl pkg:composer/magento/community-edition@2.4.5-p8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-2t3q-pmg5-qyhn
2
vulnerability VCID-368r-um85-k3d2
3
vulnerability VCID-3s5p-wb18-13ge
4
vulnerability VCID-3uj4-thpr-cue1
5
vulnerability VCID-3ydj-usv4-47fq
6
vulnerability VCID-4b5p-wqtj-7kbe
7
vulnerability VCID-4nqq-nrne-17a2
8
vulnerability VCID-6v47-xgpq-zkgf
9
vulnerability VCID-7bmk-3ab2-9ba6
10
vulnerability VCID-8365-zgh2-w3cc
11
vulnerability VCID-bftg-2sea-57cv
12
vulnerability VCID-dsy7-gm7v-tqc8
13
vulnerability VCID-eusf-bc81-9uhv
14
vulnerability VCID-gxbc-u5mr-f3c9
15
vulnerability VCID-h2ju-dedu-fqad
16
vulnerability VCID-j9e4-4xta-6qc5
17
vulnerability VCID-jeur-3jww-dqee
18
vulnerability VCID-jyhf-huep-tya2
19
vulnerability VCID-pcm6-819d-6uhm
20
vulnerability VCID-qbx1-jqke-v7hf
21
vulnerability VCID-qnpc-4r4b-3uhx
22
vulnerability VCID-s7t9-h2jx-9bgr
23
vulnerability VCID-u52p-wrjp-quhk
24
vulnerability VCID-vwpg-z9en-6yej
25
vulnerability VCID-wfdz-b6c4-quhq
26
vulnerability VCID-xmby-7b1y-v3cn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p8
2
url pkg:composer/magento/community-edition@2.4.6-p6
purl pkg:composer/magento/community-edition@2.4.6-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-4b5p-wqtj-7kbe
13
vulnerability VCID-5edy-fp8q-97fp
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7j68-gund-4qhp
17
vulnerability VCID-8365-zgh2-w3cc
18
vulnerability VCID-8gwb-c3ck-37f8
19
vulnerability VCID-9gbf-swtt-7bhz
20
vulnerability VCID-a6gj-zm14-aqhq
21
vulnerability VCID-ax9q-y1rb-33b2
22
vulnerability VCID-bfp1-cndf-d7d7
23
vulnerability VCID-bftg-2sea-57cv
24
vulnerability VCID-ctrj-y3d6-a7dv
25
vulnerability VCID-cyy2-3rr3-jkc8
26
vulnerability VCID-d9zc-rh9p-4bde
27
vulnerability VCID-dktm-v3jw-f7de
28
vulnerability VCID-dsy7-gm7v-tqc8
29
vulnerability VCID-dytj-h56v-bke9
30
vulnerability VCID-e2t8-b5yy-zkhn
31
vulnerability VCID-esjc-zzqy-nycf
32
vulnerability VCID-ferd-u8gt-akds
33
vulnerability VCID-gac9-1nnp-67cc
34
vulnerability VCID-ggtj-fbzy-87fx
35
vulnerability VCID-gxbc-u5mr-f3c9
36
vulnerability VCID-gzga-qjaf-kugh
37
vulnerability VCID-j9e4-4xta-6qc5
38
vulnerability VCID-jeur-3jww-dqee
39
vulnerability VCID-jyhf-huep-tya2
40
vulnerability VCID-kfct-k5af-n7fu
41
vulnerability VCID-kjc9-vrhf-hfav
42
vulnerability VCID-mccb-abc5-9yfs
43
vulnerability VCID-ngx2-ewzf-xbd4
44
vulnerability VCID-ntst-nee5-63d3
45
vulnerability VCID-pb4n-m8cv-9bb7
46
vulnerability VCID-pfvk-8q6r-e7c5
47
vulnerability VCID-psnm-zaza-tuf9
48
vulnerability VCID-pu8a-r3v2-g7h9
49
vulnerability VCID-qbx1-jqke-v7hf
50
vulnerability VCID-qh9p-8b9r-mufh
51
vulnerability VCID-qnpc-4r4b-3uhx
52
vulnerability VCID-rm7u-jwat-v7f1
53
vulnerability VCID-rw4d-b9yt-mbhz
54
vulnerability VCID-s45p-jru3-w3df
55
vulnerability VCID-s7t9-h2jx-9bgr
56
vulnerability VCID-t4gd-uv9g-ukh5
57
vulnerability VCID-twda-bvut-9bhp
58
vulnerability VCID-u52p-wrjp-quhk
59
vulnerability VCID-u9vz-axk1-fqfn
60
vulnerability VCID-vgz6-nvj3-xqft
61
vulnerability VCID-vwpg-z9en-6yej
62
vulnerability VCID-wfdz-b6c4-quhq
63
vulnerability VCID-wxkj-7zgv-x7bc
64
vulnerability VCID-xmby-7b1y-v3cn
65
vulnerability VCID-za87-d5x9-wuby
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p6
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2024-34105, GHSA-5632-wq7m-gfq9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zv6m-4py8-3ydq
31
url VCID-zwem-swqk-1kaz
vulnerability_id VCID-zwem-swqk-1kaz
summary Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to an application denial-of-service. A high-privileged attacker could leverage this vulnerability to exhaust system resources, causing the application to slow down or crash. Exploitation of this issue does not require user interaction.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-20716
reference_id
reference_type
scores
0
value 0.00265
scoring_system epss
scoring_elements 0.50307
published_at 2026-06-11T12:55:00Z
1
value 0.00265
scoring_system epss
scoring_elements 0.50459
published_at 2026-06-13T12:55:00Z
2
value 0.00265
scoring_system epss
scoring_elements 0.5044
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-20716
1
reference_url https://github.com/magento/magento2
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/magento/magento2
2
reference_url https://helpx.adobe.com/security/products/magento/apsb24-03.html
reference_id apsb24-03.html
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-02-18T00:20:23Z/
url https://helpx.adobe.com/security/products/magento/apsb24-03.html
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-20716
reference_id CVE-2024-20716
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-20716
4
reference_url https://github.com/advisories/GHSA-c9h9-h5gf-885r
reference_id GHSA-c9h9-h5gf-885r
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c9h9-h5gf-885r
fixed_packages
0
url pkg:composer/magento/community-edition@2.4.4-p7
purl pkg:composer/magento/community-edition@2.4.4-p7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4nqq-nrne-17a2
1
vulnerability VCID-549e-3kmc-cyfw
2
vulnerability VCID-6d1u-exkw-hbfu
3
vulnerability VCID-7bmk-3ab2-9ba6
4
vulnerability VCID-96hr-sbyj-27dw
5
vulnerability VCID-9gb1-p5qf-3kd2
6
vulnerability VCID-eban-ja9z-f7ep
7
vulnerability VCID-eusf-bc81-9uhv
8
vulnerability VCID-fqkf-67fw-cyb8
9
vulnerability VCID-frhp-vgpt-g7am
10
vulnerability VCID-gakd-m2af-z7c2
11
vulnerability VCID-gx3s-7cxk-pyfc
12
vulnerability VCID-h2ju-dedu-fqad
13
vulnerability VCID-jnuu-9mt7-jyd5
14
vulnerability VCID-kf6b-mshs-23fa
15
vulnerability VCID-ktnj-j4xu-uufs
16
vulnerability VCID-pcm6-819d-6uhm
17
vulnerability VCID-twdq-g82m-nqcp
18
vulnerability VCID-xgh4-b9yn-dkh4
19
vulnerability VCID-xgk2-yecx-q3ff
20
vulnerability VCID-xjd4-w9bn-mbex
21
vulnerability VCID-xqc4-jf6e-abfg
22
vulnerability VCID-z97t-ffda-vfes
23
vulnerability VCID-zthr-mpwx-1fef
24
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.4-p7
1
url pkg:composer/magento/community-edition@2.4.5-p6
purl pkg:composer/magento/community-edition@2.4.5-p6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-158t-bqnb-83d4
1
vulnerability VCID-2t3q-pmg5-qyhn
2
vulnerability VCID-368r-um85-k3d2
3
vulnerability VCID-3s5p-wb18-13ge
4
vulnerability VCID-3uj4-thpr-cue1
5
vulnerability VCID-3ydj-usv4-47fq
6
vulnerability VCID-4b5p-wqtj-7kbe
7
vulnerability VCID-4nqq-nrne-17a2
8
vulnerability VCID-549e-3kmc-cyfw
9
vulnerability VCID-6v47-xgpq-zkgf
10
vulnerability VCID-7bmk-3ab2-9ba6
11
vulnerability VCID-8365-zgh2-w3cc
12
vulnerability VCID-96hr-sbyj-27dw
13
vulnerability VCID-bftg-2sea-57cv
14
vulnerability VCID-dsy7-gm7v-tqc8
15
vulnerability VCID-eban-ja9z-f7ep
16
vulnerability VCID-eusf-bc81-9uhv
17
vulnerability VCID-frhp-vgpt-g7am
18
vulnerability VCID-gxbc-u5mr-f3c9
19
vulnerability VCID-h2ju-dedu-fqad
20
vulnerability VCID-j9e4-4xta-6qc5
21
vulnerability VCID-jeur-3jww-dqee
22
vulnerability VCID-jnuu-9mt7-jyd5
23
vulnerability VCID-jyhf-huep-tya2
24
vulnerability VCID-kf6b-mshs-23fa
25
vulnerability VCID-pcm6-819d-6uhm
26
vulnerability VCID-qbx1-jqke-v7hf
27
vulnerability VCID-qnpc-4r4b-3uhx
28
vulnerability VCID-s7t9-h2jx-9bgr
29
vulnerability VCID-u52p-wrjp-quhk
30
vulnerability VCID-vwpg-z9en-6yej
31
vulnerability VCID-wfdz-b6c4-quhq
32
vulnerability VCID-xgk2-yecx-q3ff
33
vulnerability VCID-xmby-7b1y-v3cn
34
vulnerability VCID-zthr-mpwx-1fef
35
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.5-p6
2
url pkg:composer/magento/community-edition@2.4.6-p4
purl pkg:composer/magento/community-edition@2.4.6-p4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-158t-bqnb-83d4
2
vulnerability VCID-16es-u6cy-u3g8
3
vulnerability VCID-1mpb-gzr2-53ar
4
vulnerability VCID-1vq9-br2m-dbby
5
vulnerability VCID-2t3q-pmg5-qyhn
6
vulnerability VCID-313z-h2v4-c3fr
7
vulnerability VCID-368r-um85-k3d2
8
vulnerability VCID-3a8p-9krx-23e8
9
vulnerability VCID-3s5p-wb18-13ge
10
vulnerability VCID-3uj4-thpr-cue1
11
vulnerability VCID-3ydj-usv4-47fq
12
vulnerability VCID-4b5p-wqtj-7kbe
13
vulnerability VCID-549e-3kmc-cyfw
14
vulnerability VCID-5edy-fp8q-97fp
15
vulnerability VCID-6v47-xgpq-zkgf
16
vulnerability VCID-78hy-q8kh-kyh7
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-96hr-sbyj-27dw
21
vulnerability VCID-9gbf-swtt-7bhz
22
vulnerability VCID-a6gj-zm14-aqhq
23
vulnerability VCID-ax9q-y1rb-33b2
24
vulnerability VCID-bfp1-cndf-d7d7
25
vulnerability VCID-bftg-2sea-57cv
26
vulnerability VCID-ctrj-y3d6-a7dv
27
vulnerability VCID-cyy2-3rr3-jkc8
28
vulnerability VCID-d9zc-rh9p-4bde
29
vulnerability VCID-dktm-v3jw-f7de
30
vulnerability VCID-dsy7-gm7v-tqc8
31
vulnerability VCID-dytj-h56v-bke9
32
vulnerability VCID-e2t8-b5yy-zkhn
33
vulnerability VCID-eban-ja9z-f7ep
34
vulnerability VCID-esjc-zzqy-nycf
35
vulnerability VCID-ferd-u8gt-akds
36
vulnerability VCID-frhp-vgpt-g7am
37
vulnerability VCID-gac9-1nnp-67cc
38
vulnerability VCID-ggtj-fbzy-87fx
39
vulnerability VCID-gxbc-u5mr-f3c9
40
vulnerability VCID-gzga-qjaf-kugh
41
vulnerability VCID-j9e4-4xta-6qc5
42
vulnerability VCID-jeur-3jww-dqee
43
vulnerability VCID-jnuu-9mt7-jyd5
44
vulnerability VCID-jyhf-huep-tya2
45
vulnerability VCID-kf6b-mshs-23fa
46
vulnerability VCID-kfct-k5af-n7fu
47
vulnerability VCID-kjc9-vrhf-hfav
48
vulnerability VCID-mccb-abc5-9yfs
49
vulnerability VCID-ngx2-ewzf-xbd4
50
vulnerability VCID-ntst-nee5-63d3
51
vulnerability VCID-pb4n-m8cv-9bb7
52
vulnerability VCID-pfvk-8q6r-e7c5
53
vulnerability VCID-psnm-zaza-tuf9
54
vulnerability VCID-pu8a-r3v2-g7h9
55
vulnerability VCID-qbx1-jqke-v7hf
56
vulnerability VCID-qh9p-8b9r-mufh
57
vulnerability VCID-qnpc-4r4b-3uhx
58
vulnerability VCID-rm7u-jwat-v7f1
59
vulnerability VCID-rw4d-b9yt-mbhz
60
vulnerability VCID-s45p-jru3-w3df
61
vulnerability VCID-s7t9-h2jx-9bgr
62
vulnerability VCID-t4gd-uv9g-ukh5
63
vulnerability VCID-twda-bvut-9bhp
64
vulnerability VCID-u52p-wrjp-quhk
65
vulnerability VCID-u9vz-axk1-fqfn
66
vulnerability VCID-vgz6-nvj3-xqft
67
vulnerability VCID-vwpg-z9en-6yej
68
vulnerability VCID-wfdz-b6c4-quhq
69
vulnerability VCID-wxkj-7zgv-x7bc
70
vulnerability VCID-xgk2-yecx-q3ff
71
vulnerability VCID-xmby-7b1y-v3cn
72
vulnerability VCID-za87-d5x9-wuby
73
vulnerability VCID-zthr-mpwx-1fef
74
vulnerability VCID-zv6m-4py8-3ydq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.6-p4
3
url pkg:composer/magento/community-edition@2.4.7-beta1
purl pkg:composer/magento/community-edition@2.4.7-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-141w-faqu-w3ay
1
vulnerability VCID-16es-u6cy-u3g8
2
vulnerability VCID-1mpb-gzr2-53ar
3
vulnerability VCID-1vq9-br2m-dbby
4
vulnerability VCID-2t3q-pmg5-qyhn
5
vulnerability VCID-313z-h2v4-c3fr
6
vulnerability VCID-368r-um85-k3d2
7
vulnerability VCID-3a8p-9krx-23e8
8
vulnerability VCID-3s5p-wb18-13ge
9
vulnerability VCID-3uj4-thpr-cue1
10
vulnerability VCID-466x-mpt9-gbgy
11
vulnerability VCID-4nqq-nrne-17a2
12
vulnerability VCID-5edy-fp8q-97fp
13
vulnerability VCID-6d1u-exkw-hbfu
14
vulnerability VCID-6v47-xgpq-zkgf
15
vulnerability VCID-78hy-q8kh-kyh7
16
vulnerability VCID-7bmk-3ab2-9ba6
17
vulnerability VCID-7j68-gund-4qhp
18
vulnerability VCID-8365-zgh2-w3cc
19
vulnerability VCID-8gwb-c3ck-37f8
20
vulnerability VCID-8hfe-bt2u-37f9
21
vulnerability VCID-96hr-sbyj-27dw
22
vulnerability VCID-9gb1-p5qf-3kd2
23
vulnerability VCID-9gbf-swtt-7bhz
24
vulnerability VCID-a6gj-zm14-aqhq
25
vulnerability VCID-ax9q-y1rb-33b2
26
vulnerability VCID-bfp1-cndf-d7d7
27
vulnerability VCID-bftg-2sea-57cv
28
vulnerability VCID-bvfd-gs5b-dyg7
29
vulnerability VCID-ctrj-y3d6-a7dv
30
vulnerability VCID-cyy2-3rr3-jkc8
31
vulnerability VCID-d9zc-rh9p-4bde
32
vulnerability VCID-dktm-v3jw-f7de
33
vulnerability VCID-dsy7-gm7v-tqc8
34
vulnerability VCID-dytj-h56v-bke9
35
vulnerability VCID-e2t8-b5yy-zkhn
36
vulnerability VCID-e9g4-n5c8-6yf9
37
vulnerability VCID-esjc-zzqy-nycf
38
vulnerability VCID-eusf-bc81-9uhv
39
vulnerability VCID-fb5x-afrq-87aj
40
vulnerability VCID-ferd-u8gt-akds
41
vulnerability VCID-fqkf-67fw-cyb8
42
vulnerability VCID-gac9-1nnp-67cc
43
vulnerability VCID-gakd-m2af-z7c2
44
vulnerability VCID-ggtj-fbzy-87fx
45
vulnerability VCID-gx3s-7cxk-pyfc
46
vulnerability VCID-gxbc-u5mr-f3c9
47
vulnerability VCID-gzga-qjaf-kugh
48
vulnerability VCID-h2ju-dedu-fqad
49
vulnerability VCID-j9e4-4xta-6qc5
50
vulnerability VCID-jkrp-j7st-27f3
51
vulnerability VCID-jnuu-9mt7-jyd5
52
vulnerability VCID-jyhf-huep-tya2
53
vulnerability VCID-kfct-k5af-n7fu
54
vulnerability VCID-kjc9-vrhf-hfav
55
vulnerability VCID-ktnj-j4xu-uufs
56
vulnerability VCID-kxjv-xm7r-hkhs
57
vulnerability VCID-mccb-abc5-9yfs
58
vulnerability VCID-ngx2-ewzf-xbd4
59
vulnerability VCID-ntst-nee5-63d3
60
vulnerability VCID-pb4n-m8cv-9bb7
61
vulnerability VCID-pcm6-819d-6uhm
62
vulnerability VCID-pfvk-8q6r-e7c5
63
vulnerability VCID-psnm-zaza-tuf9
64
vulnerability VCID-pu8a-r3v2-g7h9
65
vulnerability VCID-q12a-kwpk-yufv
66
vulnerability VCID-q68u-w433-tqb9
67
vulnerability VCID-qbx1-jqke-v7hf
68
vulnerability VCID-qh9p-8b9r-mufh
69
vulnerability VCID-qnpc-4r4b-3uhx
70
vulnerability VCID-qr8w-qwb5-6uag
71
vulnerability VCID-rm7u-jwat-v7f1
72
vulnerability VCID-rw4d-b9yt-mbhz
73
vulnerability VCID-s45p-jru3-w3df
74
vulnerability VCID-s7t9-h2jx-9bgr
75
vulnerability VCID-t4gd-uv9g-ukh5
76
vulnerability VCID-twda-bvut-9bhp
77
vulnerability VCID-twdq-g82m-nqcp
78
vulnerability VCID-u9vz-axk1-fqfn
79
vulnerability VCID-vgz6-nvj3-xqft
80
vulnerability VCID-vwpg-z9en-6yej
81
vulnerability VCID-wfdz-b6c4-quhq
82
vulnerability VCID-wxkj-7zgv-x7bc
83
vulnerability VCID-xgh4-b9yn-dkh4
84
vulnerability VCID-xjd4-w9bn-mbex
85
vulnerability VCID-xmby-7b1y-v3cn
86
vulnerability VCID-xqc4-jf6e-abfg
87
vulnerability VCID-z97t-ffda-vfes
88
vulnerability VCID-za87-d5x9-wuby
89
vulnerability VCID-zssu-1dmn-sycb
90
vulnerability VCID-zym7-1cr7-mkaa
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1
aliases CVE-2024-20716, GHSA-c9h9-h5gf-885r
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zwem-swqk-1kaz
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/magento/community-edition@2.4.7-beta1