CVE-2024-45116
Adobe Commerce | Cross-site Scripting (XSS) (CWE-79)
En bref Sévérité HIGH 8.1 EPSS EPSS 0.94 % · centile 61 (2026-10-27) État PUBLISHED Publiée 2024-10-10 Mise à jour 2024-10-10 Attribuée par adobe Statut NVD Analyzed Description Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could be exploited to execute arbitrary code. If an admin attacker can trick a user into clicking a specially crafted link or submitting a form, malicious scripts may be executed within the context of the victim's browser and have high impact on confidentiality and integrity. Exploitation of this issue requires user interaction.
Scores Version Score Vecteur Évalué par CVSS 3.1 HIGH 8.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N adobe CVSS 3.1 HIGH 8.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N NVD · psirt@adobe.com (Secondary)
Faiblesses (CWE)
Avis
Références européennes
Avis du CERT-FR
Configurations affectées (CPE NVD) cpe:2.3:a:adobe:commerce:-:*:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.3.7:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.3.7:p1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.3.7:p2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.3.7:p3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.3.7:p4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.3.7:p4-ext1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.3.7:p4-ext2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.3.7:p4-ext3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.3.7:p4-ext4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.0:*:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.0:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.0:ext-1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.0:ext-2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.0:ext-3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.0:ext-4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.1:*:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.1:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.1:ext-1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.1:ext-2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.1:ext-3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.1:ext-4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.2:*:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.2:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.2:ext-1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.2:ext-2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.2:ext-3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.2:ext-4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.2:p1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.2:p2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.3:*:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.3:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.3:ext-1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.3:ext-2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.3:ext-3:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.3:ext-4:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.3:p1:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.3:p2:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*+76 autres Produits affectés
Références
Sources
