CVE-2024-34108: Large attack surface through legit webhook usage in Adobe Commerce

First published: Thu Jun 13 2024(Updated: )

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but admin privileges are required and scope is changed.

Credit: psirt@adobe.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/weakness
• agent/title
• agent/description
• agent/references
• agent/type
• agent/first-publish-date
• agent/author
• agent/event
• agent/severity
• agent/softwarecombine
• agent/tags
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• vendor/adobe
• canonical/adobe commerce
• version/adobe commerce/2.3.7
• version/adobe commerce/2.3.7-p1
• version/adobe commerce/2.3.7-p2
• version/adobe commerce/2.3.7-p3
• version/adobe commerce/2.3.7-p4
• version/adobe commerce/2.3.7-p4-ext1
• version/adobe commerce/2.3.7-p4-ext2
• version/adobe commerce/2.3.7-p4-ext3
• version/adobe commerce/2.3.7-p4-ext4
• version/adobe commerce/2.4.0
• version/adobe commerce/2.4.0-ext-1
• version/adobe commerce/2.4.0-ext-2
• version/adobe commerce/2.4.0-ext-3
• version/adobe commerce/2.4.0-ext-4
• version/adobe commerce/2.4.1
• version/adobe commerce/2.4.1-ext-1
• version/adobe commerce/2.4.1-ext-2
• version/adobe commerce/2.4.1-ext-3
• version/adobe commerce/2.4.1-ext-4
• version/adobe commerce/2.4.2
• version/adobe commerce/2.4.2-ext-1
• version/adobe commerce/2.4.2-ext-2
• version/adobe commerce/2.4.2-ext-3
• version/adobe commerce/2.4.2-ext-4
• version/adobe commerce/2.4.3
• version/adobe commerce/2.4.3-ext-1
• version/adobe commerce/2.4.3-ext-2
• version/adobe commerce/2.4.3-ext-3
• version/adobe commerce/2.4.3-ext-4
• version/adobe commerce/2.4.4
• version/adobe commerce/2.4.4-p1
• version/adobe commerce/2.4.4-p2
• version/adobe commerce/2.4.4-p3
• version/adobe commerce/2.4.4-p4
• version/adobe commerce/2.4.4-p5
• version/adobe commerce/2.4.4-p6
• version/adobe commerce/2.4.5
• version/adobe commerce/2.4.5-p1
• version/adobe commerce/2.4.5-p2
• version/adobe commerce/2.4.5-p3
• version/adobe commerce/2.4.5-p4
• version/adobe commerce/2.4.5-p5
• version/adobe commerce/2.4.6
• version/adobe commerce/2.4.6-p1
• version/adobe commerce/2.4.6-p2
• version/adobe commerce/2.4.6-p3
• canonical/adobe commerce webhooks
• version/adobe commerce webhooks/1.2.0
• version/adobe commerce webhooks/1.4.0
• canonical/adobe magento
• version/adobe magento/2.4.4
• version/adobe magento/2.4.4-p1
• version/adobe magento/2.4.4-p2
• version/adobe magento/2.4.4-p3
• version/adobe magento/2.4.4-p4
• version/adobe magento/2.4.4-p5
• version/adobe magento/2.4.4-p6
• version/adobe magento/2.4.4-p7
• version/adobe magento/2.4.4-p8
• version/adobe magento/2.4.5
• version/adobe magento/2.4.5-p1
• version/adobe magento/2.4.5-p2
• version/adobe magento/2.4.5-p3
• version/adobe magento/2.4.5-p4
• version/adobe magento/2.4.5-p5
• version/adobe magento/2.4.5-p6
• version/adobe magento/2.4.5-p7
• version/adobe magento/2.4.6
• version/adobe magento/2.4.6-p1
• version/adobe magento/2.4.6-p2
• version/adobe magento/2.4.6-p3
• version/adobe magento/2.4.6-p4
• version/adobe magento/2.4.6-p5
• version/adobe magento/2.4.7-b1