CVE-2024-39397
Essential information
- Published
- 14/08/2024 12:15
- Modified
- 14/08/2024 14:46
- Author
- —
- Creator
- —
- CVSS
- 9.0 CRITICAL (v3.1)
- CISA KEV
- No
- CWE
- —
- CVSS vector
-
—
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H—
CVSS metrics
- Access vector
- —
- Access complexity
- —
- Authentication
- —
- Confidentiality impact
- —
- Integrity impact
- —
- Availability impact
- —
- Exploitability
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- NETWORK
- Attack complexity
- HIGH
- Privileges required
- NONE
- User interaction
- NONE
- Scope
- CHANGED
- Confidentiality impact
- HIGH
- Integrity impact
- HIGH
- Availability impact
- HIGH
- Exploit code maturity
- —
- Remediation level
- —
- Report confidence
- —
- Temporal score
- —
- Attack vector
- —
- Attack complexity
- —
- Attack requirements
- —
- Privileges required
- —
- User interaction
- —
- Confidentiality (V)
- —
- Confidentiality (S)
- —
- Integrity (V)
- —
- Integrity (S)
- —
- Availability (V)
- —
- Availability (S)
- —
- Exploit maturity
- —
Description
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution by an attacker. An attacker could exploit this vulnerability by uploading a malicious file which can then be executed on the server. Exploitation of this issue does not require user interaction, but attack complexity is high and scope is changed.
NVD status
- Status
- Analyzed — CVE is currently being analyzed by NVD staff, this process results in association of reference link tags, CVSS scores, CWE association, and CPE applicability statements.
- Source
- [email protected]
- NVD
- View on NVD
Affected products (CPE)
| Product | CPE |
|---|---|
| adobe / commerce | cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:* |
| adobe / commerce | cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:* |
| adobe / magento | cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:* |