Description
Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Adobe Commerce | Adobe / Adobe Commerce | >= 0, <= 2.4.4-p8 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.6-p5 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.5-p7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.4-p8 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.3-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.2-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.1-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.0-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.3.7-p4-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.6-p5 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.5-p7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.4-p8 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.3-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.2-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.1-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.0-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.3.7-p4-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.6-p5 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.5-p7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.4-p8 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.3-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.2-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.1-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.0-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.3.7-p4-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.6-p5 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.5-p7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.4-p8 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.3-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.2-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.1-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.0-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.3.7-p4-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.6-p5 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.5-p7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.4-p8 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.3-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.2-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.1-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.0-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.3.7-p4-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.6-p5 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.5-p7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.4-p8 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.3-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.2-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.1-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.0-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.3.7-p4-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.6-p5 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.5-p7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.4-p8 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.3-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.2-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.1-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.0-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.3.7-p4-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.6-p5 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.5-p7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.4-p8 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.3-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.2-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.1-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.0-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.3.7-p4-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.6-p5 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.5-p7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.4-p8 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.3-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.2-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.1-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.4.0-ext-7 | affected |
| commerce | adobe / commerce | >= 0, <= 2.3.7-p4-ext-7 | affected |