CVE-2024-39410
Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Adobe Commerce | Cross-Site Request Forgery (CSRF) (CWE-352)
| Assigner | adobe |
| Reserved | 2024-06-24 |
| Published | 2024-08-14 |
| Updated | 2024-09-17 |
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass security features and perform minor integrity changes on behalf of a user. The vulnerability could be exploited by tricking a victim into clicking a link or loading a page that submits a malicious request. Exploitation of this issue does not require user interaction.
| CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
https://helpx.adobe.com/security/products/magento/apsb24-61.html
