What is the severity of CVE-2024-45116?

CVE-2024-45116 is classified as a critical Cross-Site Scripting (XSS) vulnerability.

How do I fix CVE-2024-45116?

To fix CVE-2024-45116, upgrade to Adobe Commerce version 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, or 2.4.7-p3.

What versions of Adobe Commerce are affected by CVE-2024-45116?

Adobe Commerce versions 2.4.4, 2.4.5, 2.4.6, and 2.4.7 are affected by CVE-2024-45116.

What can an attacker achieve with CVE-2024-45116?

An attacker can exploit CVE-2024-45116 to execute arbitrary code by tricking a user into interacting with a malicious link or form.

Who is at risk due to CVE-2024-45116?

Users of affected versions of Adobe Commerce are at risk of exploitation from attackers leveraging this XSS vulnerability.

Vulnerability/
CVE-2024-45116

high

8.1

CWE

10/10/2024

11/10/2024

CVE-2024-45116: Adobe Commerce | Cross-site Scripting (XSS) (CWE-79)

First published: Thu Oct 10 2024(Updated: )

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could be exploited to execute arbitrary code. If an admin attacker can trick a user into clicking a specially crafted link or submitting a form, malicious scripts may be executed within the context of the victim's browser and have high impact on confidentiality and integrity. Exploitation of this issue requires user interaction.

Credit: psirt@adobe.com psirt@adobe.com

Affected Software	Affected Version	How to fix
composer/magento/community-edition	=2.4.4
composer/magento/community-edition	=2.4.5
composer/magento/community-edition	=2.4.6
composer/magento/community-edition	=2.4.7
composer/magento/community-edition	<2.4.4-p11	2.4.4-p11
composer/magento/community-edition	>=2.4.5-p1<2.4.5-p10	2.4.5-p10
composer/magento/community-edition	>=2.4.6-p1<2.4.6-p8	2.4.6-p8
composer/magento/community-edition	>=2.4.7-beta1<2.4.7-p3	2.4.7-p3
Adobe Magento Commerce
Adobe Magento Commerce	=2.3.7
Adobe Magento Commerce	=2.3.7-p1
Adobe Magento Commerce	=2.3.7-p2
Adobe Magento Commerce	=2.3.7-p3
Adobe Magento Commerce	=2.3.7-p4
Adobe Magento Commerce	=2.3.7-p4-ext1
Adobe Magento Commerce	=2.3.7-p4-ext2
Adobe Magento Commerce	=2.3.7-p4-ext3
Adobe Magento Commerce	=2.3.7-p4-ext4
Adobe Magento Commerce	=2.4.0
Adobe Magento Commerce	=2.4.0
Adobe Magento Commerce	=2.4.0-ext-1
Adobe Magento Commerce	=2.4.0-ext-2
Adobe Magento Commerce	=2.4.0-ext-3
Adobe Magento Commerce	=2.4.0-ext-4
Adobe Magento Commerce	=2.4.1
Adobe Magento Commerce	=2.4.1
Adobe Magento Commerce	=2.4.1-ext-1
Adobe Magento Commerce	=2.4.1-ext-2
Adobe Magento Commerce	=2.4.1-ext-3
Adobe Magento Commerce	=2.4.1-ext-4
Adobe Magento Commerce	=2.4.2
Adobe Magento Commerce	=2.4.2
Adobe Magento Commerce	=2.4.2-ext-1
Adobe Magento Commerce	=2.4.2-ext-2
Adobe Magento Commerce	=2.4.2-ext-3
Adobe Magento Commerce	=2.4.2-ext-4
Adobe Magento Commerce	=2.4.2-p1
Adobe Magento Commerce	=2.4.2-p2
Adobe Magento Commerce	=2.4.3
Adobe Magento Commerce	=2.4.3
Adobe Magento Commerce	=2.4.3-ext-1
Adobe Magento Commerce	=2.4.3-ext-2
Adobe Magento Commerce	=2.4.3-ext-3
Adobe Magento Commerce	=2.4.3-ext-4
Adobe Magento Commerce	=2.4.3-p1
Adobe Magento Commerce	=2.4.3-p2
Adobe Magento Commerce	=2.4.4
Adobe Magento Commerce	=2.4.4-p1
Adobe Magento Commerce	=2.4.4-p10
Adobe Magento Commerce	=2.4.4-p2
Adobe Magento Commerce	=2.4.4-p3
Adobe Magento Commerce	=2.4.4-p4
Adobe Magento Commerce	=2.4.4-p5
Adobe Magento Commerce	=2.4.4-p6
Adobe Magento Commerce	=2.4.4-p7
Adobe Magento Commerce	=2.4.4-p8
Adobe Magento Commerce	=2.4.4-p9
Adobe Magento Commerce	=2.4.5
Adobe Magento Commerce	=2.4.5-p1
Adobe Magento Commerce	=2.4.5-p2
Adobe Magento Commerce	=2.4.5-p3
Adobe Magento Commerce	=2.4.5-p4
Adobe Magento Commerce	=2.4.5-p5
Adobe Magento Commerce	=2.4.5-p6
Adobe Magento Commerce	=2.4.5-p7
Adobe Magento Commerce	=2.4.5-p8
Adobe Magento Commerce	=2.4.5-p9
Adobe Magento Commerce	=2.4.6
Adobe Magento Commerce	=2.4.6-p1
Adobe Magento Commerce	=2.4.6-p2
Adobe Magento Commerce	=2.4.6-p3
Adobe Magento Commerce	=2.4.6-p4
Adobe Magento Commerce	=2.4.6-p5
Adobe Magento Commerce	=2.4.6-p6
Adobe Magento Commerce	=2.4.6-p7
Adobe Magento Commerce	=2.4.7
Adobe Magento Commerce	=2.4.7-b1
Adobe Magento Commerce	=2.4.7-b2
Adobe Magento Commerce	=2.4.7-p1
Adobe Magento Commerce	=2.4.7-p2
Adobe Commerce	=1.3.3
Adobe Commerce	=1.3.3-p10
Adobe Commerce	=1.3.4
Adobe Commerce	=1.3.4-p9
Adobe Commerce	=1.3.5
Adobe Commerce	=1.3.5-p7
Adobe Commerce	=1.4.2
Adobe Commerce	=1.4.2-p1
Adobe Commerce	=1.4.2-p2
Adobe Magento Commerce
Adobe Magento Commerce	=2.4.3
Adobe Magento Commerce	=2.4.4
Adobe Magento Commerce	=2.4.4-p1
Adobe Magento Commerce	=2.4.4-p10
Adobe Magento Commerce	=2.4.4-p2
Adobe Magento Commerce	=2.4.4-p3
Adobe Magento Commerce	=2.4.4-p4
Adobe Magento Commerce	=2.4.4-p5
Adobe Magento Commerce	=2.4.4-p6
Adobe Magento Commerce	=2.4.4-p7
Adobe Magento Commerce	=2.4.4-p8
Adobe Magento Commerce	=2.4.4-p9
Adobe Magento Commerce	=2.4.5
Adobe Magento Commerce	=2.4.5-p1
Adobe Magento Commerce	=2.4.5-p2
Adobe Magento Commerce	=2.4.5-p3
Adobe Magento Commerce	=2.4.5-p4
Adobe Magento Commerce	=2.4.5-p5
Adobe Magento Commerce	=2.4.5-p6
Adobe Magento Commerce	=2.4.5-p7
Adobe Magento Commerce	=2.4.5-p8
Adobe Magento Commerce	=2.4.5-p9
Adobe Magento Commerce	=2.4.6
Adobe Magento Commerce	=2.4.6-p1
Adobe Magento Commerce	=2.4.6-p2
Adobe Magento Commerce	=2.4.6-p3
Adobe Magento Commerce	=2.4.6-p4
Adobe Magento Commerce	=2.4.6-p5
Adobe Magento Commerce	=2.4.6-p6
Adobe Magento Commerce	=2.4.6-p7
Adobe Magento Commerce	=2.4.7
Adobe Magento Commerce	=2.4.7-b1
Adobe Magento Commerce	=2.4.7-p1
Adobe Magento Commerce	=2.4.7-p2

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-45116?
CVE-2024-45116 is classified as a critical Cross-Site Scripting (XSS) vulnerability.
How do I fix CVE-2024-45116?
To fix CVE-2024-45116, upgrade to Adobe Commerce version 2.4.4-p11, 2.4.5-p10, 2.4.6-p8, or 2.4.7-p3.
What versions of Adobe Commerce are affected by CVE-2024-45116?
Adobe Commerce versions 2.4.4, 2.4.5, 2.4.6, and 2.4.7 are affected by CVE-2024-45116.
What can an attacker achieve with CVE-2024-45116?
An attacker can exploit CVE-2024-45116 to execute arbitrary code by tricking a user into interacting with a malicious link or form.
Who is at risk due to CVE-2024-45116?
Users of affected versions of Adobe Commerce are at risk of exploitation from attackers leveraging this XSS vulnerability.

agent/weakness
agent/title
agent/first-publish-date
agent/type
agent/severity
collector/github-advisory-latest
source/GitHub
alias/GHSA-873m-72g6-853g
alias/CVE-2024-45116
agent/software-canonical-lookup
agent/last-modified-date
agent/references
agent/description
agent/author
agent/event
collector/mitre-cve
source/MITRE
collector/github-advisory
agent/trending
agent/source
agent/softwarecombine
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup-request
collector/nvd-cve
package-manager/composer
vendor/adobe
canonical/adobe magento commerce
version/adobe magento commerce/2.3.7
version/adobe magento commerce/2.3.7-p1
version/adobe magento commerce/2.3.7-p2
version/adobe magento commerce/2.3.7-p3
version/adobe magento commerce/2.3.7-p4
version/adobe magento commerce/2.3.7-p4-ext1
version/adobe magento commerce/2.3.7-p4-ext2
version/adobe magento commerce/2.3.7-p4-ext3
version/adobe magento commerce/2.3.7-p4-ext4
version/adobe magento commerce/2.4.0
version/adobe magento commerce/2.4.0-ext-1
version/adobe magento commerce/2.4.0-ext-2
version/adobe magento commerce/2.4.0-ext-3
version/adobe magento commerce/2.4.0-ext-4
version/adobe magento commerce/2.4.1
version/adobe magento commerce/2.4.1-ext-1
version/adobe magento commerce/2.4.1-ext-2
version/adobe magento commerce/2.4.1-ext-3
version/adobe magento commerce/2.4.1-ext-4
version/adobe magento commerce/2.4.2
version/adobe magento commerce/2.4.2-ext-1
version/adobe magento commerce/2.4.2-ext-2
version/adobe magento commerce/2.4.2-ext-3
version/adobe magento commerce/2.4.2-ext-4
version/adobe magento commerce/2.4.2-p1
version/adobe magento commerce/2.4.2-p2
version/adobe magento commerce/2.4.3
version/adobe magento commerce/2.4.3-ext-1
version/adobe magento commerce/2.4.3-ext-2
version/adobe magento commerce/2.4.3-ext-3
version/adobe magento commerce/2.4.3-ext-4
version/adobe magento commerce/2.4.3-p1
version/adobe magento commerce/2.4.3-p2
version/adobe magento commerce/2.4.4
version/adobe magento commerce/2.4.4-p1
version/adobe magento commerce/2.4.4-p10
version/adobe magento commerce/2.4.4-p2
version/adobe magento commerce/2.4.4-p3
version/adobe magento commerce/2.4.4-p4
version/adobe magento commerce/2.4.4-p5
version/adobe magento commerce/2.4.4-p6
version/adobe magento commerce/2.4.4-p7
version/adobe magento commerce/2.4.4-p8
version/adobe magento commerce/2.4.4-p9
version/adobe magento commerce/2.4.5
version/adobe magento commerce/2.4.5-p1
version/adobe magento commerce/2.4.5-p2
version/adobe magento commerce/2.4.5-p3
version/adobe magento commerce/2.4.5-p4
version/adobe magento commerce/2.4.5-p5
version/adobe magento commerce/2.4.5-p6
version/adobe magento commerce/2.4.5-p7
version/adobe magento commerce/2.4.5-p8
version/adobe magento commerce/2.4.5-p9
version/adobe magento commerce/2.4.6
version/adobe magento commerce/2.4.6-p1
version/adobe magento commerce/2.4.6-p2
version/adobe magento commerce/2.4.6-p3
version/adobe magento commerce/2.4.6-p4
version/adobe magento commerce/2.4.6-p5
version/adobe magento commerce/2.4.6-p6
version/adobe magento commerce/2.4.6-p7
version/adobe magento commerce/2.4.7
version/adobe magento commerce/2.4.7-b1
version/adobe magento commerce/2.4.7-b2
version/adobe magento commerce/2.4.7-p1
version/adobe magento commerce/2.4.7-p2
canonical/adobe commerce
version/adobe commerce/1.3.3
version/adobe commerce/1.3.3-p10
version/adobe commerce/1.3.4
version/adobe commerce/1.3.4-p9
version/adobe commerce/1.3.5
version/adobe commerce/1.3.5-p7
version/adobe commerce/1.4.2
version/adobe commerce/1.4.2-p1
version/adobe commerce/1.4.2-p2