CVE-2025-27207: Adobe Commerce | Improper Access Control (CWE-284)
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Improper Access Control vulnerability that could result in privilege escalation. A low privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27207?
CVE-2025-27207 is classified with a low severity rating.
How do I fix CVE-2025-27207?
To fix CVE-2025-27207, upgrade to Adobe Commerce version 2.4.9 or later.
What versions of Adobe Commerce are affected by CVE-2025-27207?
Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by CVE-2025-27207.
What type of vulnerability is CVE-2025-27207?
CVE-2025-27207 is an Improper Access Control vulnerability leading to potential privilege escalation.
Who can exploit CVE-2025-27207?
A low privileged attacker can exploit CVE-2025-27207 to bypass security measures.