CVE-2024-39410
CVE-2024-39410
Título es
CVE-2024-39410
Mié, 14/08/2024 – 12:15
Tipo
CWE-352
Gravedad 2.0 Txt
Pendiente de análisis
CPE
cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*————2.4.3___cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*————___cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*————___cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*————2.4.3___cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*————___cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*————
Título en
CVE-2024-39410
Descripción en
Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could allow an attacker to bypass security features and perform minor unauthorised actions on behalf of a user. The vulnerability could be exploited by tricking a victim into clicking a link or loading a page that submits a malicious request. Exploitation of this issue requires user interaction.
14/08/2024
14/08/2024
Fabricante
adobe
Producto
commerce
magento
Vector CVSS:3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Gravedad 3.1 (CVSS 3.1 Base Score)
5.50
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
MEDIUM
Enviar en el boletín
Off
