PT-2022-1799 · Adobe · Magento Commerce+1

Published 2022-02-17 · Updated 2023-08-12 · CVE-2022-24087

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Magento Commerce (affected versions not specified) Adobe Commerce (affected versions not specified)

Description The issue exists due to insufficient input validation in the software platform. This allows a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2022-01199

CVE-2022-24087

Affected Products

Commerce

Magento Commerce

References · 10

• https://bdu.fstec.ru/vul/2022-01199 · Security Note
• https://t.me/true_secator/2645 · Telegram Post
• https://t.me/aptreports/1716 · Telegram Post
• https://t.me/thehackernews/1897 · Telegram Post
• https://t.me/true_secator/3962 · Telegram Post
• https://t.me/ptswarm/108 · Telegram Post
• https://t.me/nekaspersky/1828 · Telegram Post
• https://twitter.com/fletch_ai/status/1690560558469386240 · Twitter Post
• https://xakep.ru/2022/02/18/second-rce-in-magento-adobe-commerce · Note
• https://helpx.adobe.com/security/products/magento/apsb22-12.html · Note