CVE-2023-22251: Adobe Commerce Incorrect Authorization Security feature bypass
First published: Mon Mar 27 2023(Updated: )
Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an Incorrect Authorization vulnerability. A low-privileged authenticated attacker could leverage this vulnerability to achieve minor information disclosure.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Commerce | <2.4.4 | |
| Adobe Commerce | =2.4.4 | |
| Adobe Commerce | =2.4.4-p1 | |
| Adobe Commerce | =2.4.4-p2 | |
| Adobe Commerce | =2.4.5 | |
| Adobe Commerce | =2.4.5-p1 | |
| Adobe Magento Open Source | <2.4.4 | |
| Adobe Magento Open Source | =2.4.4 | |
| Adobe Magento Open Source | =2.4.4-p1 | |
| Adobe Magento Open Source | =2.4.4-p2 | |
| Adobe Magento Open Source | =2.4.5 | |
| Adobe Magento Open Source | =2.4.5-p1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this Adobe Commerce vulnerability?
The vulnerability ID of this Adobe Commerce vulnerability is CVE-2023-22251.
Which versions of Adobe Commerce are affected by this vulnerability?
Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by this vulnerability.
What is the severity level of this vulnerability?
The severity level of this vulnerability is medium with a CVSS score of 4.3.
What is the impact of this vulnerability?
The impact of this vulnerability is minor information disclosure.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following link: [Adobe Security Bulletin APSB23-17](https://helpx.adobe.com/security/products/magento/apsb23-17.html).
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/title
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/description
- agent/event
- agent/first-publish-date
- vendor/adobe
- canonical/adobe commerce
- version/adobe commerce/2.4.4
- version/adobe commerce/2.4.4-p1
- version/adobe commerce/2.4.4-p2
- version/adobe commerce/2.4.5
- version/adobe commerce/2.4.5-p1
- canonical/adobe magento open source
- version/adobe magento open source/2.4.4
- version/adobe magento open source/2.4.4-p1
- version/adobe magento open source/2.4.4-p2
- version/adobe magento open source/2.4.5
- version/adobe magento open source/2.4.5-p1