Magento Open Source Improper Authorization vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-34104 · ADVISORY
• magento/magento2 commit 30877fc · WEB
• magento/magento2 commit a3c6d6e · WEB
• magento/magento2 commit c5c5388 · WEB
• magento/magento2 commit d10435b · WEB
• magento/magento2 · PACKAGE
• helpx.adobe.com/security/products/magento/apsb24-40.html · WEB

magento/community-edition のその他の脆弱性

• CVE-2025-54267中 6.5Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authoriza…
• CVE-2025-54266中 4.8Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Sc…
• CVE-2025-54265中 5.9Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authoriza…
• CVE-2025-54264高 8.1Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Sc…
• CVE-2025-54263高 8.1Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authoriza…