CyberRota Analysis
AI-GeneratedAdobe Commerce is vulnerable to an Incorrect Authorization flaw that allows attackers with high privileges to bypass security measures and gain unauthorized write access. This could lead to limited disruptions in availability and potential data manipulation without requiring user interaction. Organizations using Adobe Commerce should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to bypass security measures and gain unauthorized write access, causing a limited disruption to availability. Exploitation of this issue does not require user interaction. Scope is changed.
Related CVEs
Other vulnerabilities affecting the same vendor(s)