PT-2024-6007 · Adobe · Magento Open Source+1

Published 2024-08-13 · Updated 2024-08-13 · CVE-024-39400

PT · AI

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Magento Open Source and Adobe Commerce (affected versions not specified)

Description: The issue is related to insufficient protection of the web page structure in Magento Open Source and Adobe Commerce, allowing a remote attacker to execute arbitrary code.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2024-06817

CVE-024-39400

Affected Products

Commerce

Magento Open Source

References · 2

• https://bdu.fstec.ru/vul/2024-06817 · Security Note
• https://helpx.adobe.com/security/products/magento/apsb24-61.html · Note