CVE-2022-24093 — Adobe Commerce post-auth improper input validation leads to remote code execution

CVE-2022-24093

Adobe Commerce post-auth improper input validation leads to remote code execution PUBLISHED

Description (CNA)

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

Affected (CNA)

Vendor / product	Versions
Adobe / Adobe Commerce	affected 0 through 2.3.7-p2

CWE

CWE-20

References

https://helpx.adobe.com/security/products/magento/apsb22-13.html

ADP enrichment

CVE

No English description supplied.

https://helpx.adobe.com/security/products/magento/apsb22-13.html

CISA-ADP

No English description supplied.

No references supplied.