CVE-2022-24086

KEV

Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability

View CVE record →

Vendor / Project: Adobe
Product: Commerce and Magento Open Source
Date added: Feb 15, 2022
Due date: Mar 1, 2022
Known ransomware use: Unknown
CWEs: CWE-20

Description

Adobe Commerce and Magento Open Source contain an improper input validation vulnerability which can allow for arbitrary code execution.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2022-24086