Commerce and Magento Open Source

Jul 17, 2024high

CVE-2024-34102: Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-34102EPSS 100.0%AdobeCommerce and Magento Open Source

CISA KEV ↗ · unattributed attribution

Feb 15, 2022high

CVE-2022-24086: Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability

Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution. Required action: Apply updates per vendor instructions.

CVE-2022-24086EPSS 99.2%AdobeCommerce and Magento Open Source

CISA KEV ↗ · unattributed attribution