CVE-2022-24086

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 16-02-2022 06:15

Last modified: - 22-02-2022 06:40

Total changes: - 2

Description

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

None

Privileges required

Unchanged

Scope

None

User interaction

9.8

Base score

3.9

5.9

Exploitability score

Impact score

Verification logic

vendor=adobe AND product=commerce AND versionEndExcluding=2.3.0

vendor=adobe AND product=commerce AND versionEndIncluding=2.3.6 AND versionStartExcluding=2.3.3

vendor=adobe AND product=commerce AND version=2.3.7 AND update=p1

vendor=adobe AND product=commerce AND version=2.3.7 AND update=p2

vendor=adobe AND product=commerce AND versionEndIncluding=2.4.2 AND versionStartIncluding=2.4.0

vendor=adobe AND product=commerce AND version=2.4.3 AND update=-

vendor=adobe AND product=commerce AND version=2.4.3 AND update=p1

vendor=magento AND product=magento AND software_edition=commerce AND versionEndExcluding=2.3.0

vendor=magento AND product=magento AND software_edition=commerce AND versionEndIncluding=2.3.6 AND versionStartExcluding=2.3.3

vendor=magento AND product=magento AND version=2.3.7 AND update=p1 AND software_edition=commerce

vendor=magento AND product=magento AND version=2.3.7 AND update=p2 AND software_edition=commerce

vendor=magento AND product=magento AND software_edition=commerce AND versionEndIncluding=2.4.2 AND versionStartIncluding=2.4.0

vendor=magento AND product=magento AND version=2.4.3 AND update=- AND software_edition=commerce

vendor=magento AND product=magento AND version=2.4.3 AND update=p1 AND software_edition=commerce

Reference

https://helpx.adobe.com/security/products/magento/apsb22-12.html

Keywords

CVE-2022-24086

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-24086

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures