CVE-2024-34108

HIGH 7.2CVE-2024-34108 · Published 13/06/2024 · updated 17/06/2026

In short

CVE-2024-34108 is a HIGH (CVSS 7.2) vulnerability affecting commerce (adobe), commerce webhooks (adobe), magento (adobe).
Chance of exploitation in the next 30 days (EPSS): 1.4%, higher than 73.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
commerce adobe	`= 2.3.7= 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.4.5= 2.4.6`	No fix yet
commerce webhooks adobe	`≥ 1.2.0, ≤ 1.4.0`	No fix yet
magento adobe	`= 2.4.4= 2.4.5= 2.4.6= 2.4.7`	No fix yet

Description

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but admin privileges are required and scope is changed.

References

helpx.adobe.com/security/products/magento/apsb24-40.html · Vendor Advisory

More vulnerabilities in commerce

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

commerce

adobe

= 2.3.7= 2.4.0= 2.4.1= 2.4.2= 2.4.3= 2.4.4= 2.4.5= 2.4.6

No fix yet

commerce webhooks

adobe

≥ 1.2.0, ≤ 1.4.0

No fix yet

magento

adobe

= 2.4.4= 2.4.5= 2.4.6= 2.4.7

No fix yet

Description

More vulnerabilities in commerce

See all →