CVE-2025-24412 - Vulnerability Details

Vendors	Products
Adobe	Commerce Commerce B2b Magento

Link	Providers
https://helpx.adobe.com/security/products/magento/apsb25-08.html

Type	Values Removed	Values Added
First Time appeared		Adobe Adobe commerce Adobe commerce B2b Adobe magento
CPEs		cpe:2.3:a:adobe:commerce:::::::: cpe:2.3:a:adobe:commerce:2.4.4:-:::::: cpe:2.3:a:adobe:commerce:2.4.4:p10:::::: cpe:2.3:a:adobe:commerce:2.4.4:p11:::::: cpe:2.3:a:adobe:commerce:2.4.4:p1:::::: cpe:2.3:a:adobe:commerce:2.4.4:p2:::::: cpe:2.3:a:adobe:commerce:2.4.4:p3:::::: cpe:2.3:a:adobe:commerce:2.4.4:p4:::::: cpe:2.3:a:adobe:commerce:2.4.4:p5:::::: cpe:2.3:a:adobe:commerce:2.4.4:p6:::::: cpe:2.3:a:adobe:commerce:2.4.4:p7:::::: cpe:2.3:a:adobe:commerce:2.4.4:p8:::::: cpe:2.3:a:adobe:commerce:2.4.4:p9:::::: cpe:2.3:a:adobe:commerce:2.4.5:-:::::: cpe:2.3:a:adobe:commerce:2.4.5:p10:::::: cpe:2.3:a:adobe:commerce:2.4.5:p1:::::: cpe:2.3:a:adobe:commerce:2.4.5:p2:::::: cpe:2.3:a:adobe:commerce:2.4.5:p3:::::: cpe:2.3:a:adobe:commerce:2.4.5:p4:::::: cpe:2.3:a:adobe:commerce:2.4.5:p5:::::: cpe:2.3:a:adobe:commerce:2.4.5:p6:::::: cpe:2.3:a:adobe:commerce:2.4.5:p7:::::: cpe:2.3:a:adobe:commerce:2.4.5:p8:::::: cpe:2.3:a:adobe:commerce:2.4.5:p9:::::: cpe:2.3:a:adobe:commerce:2.4.6:-:::::: cpe:2.3:a:adobe:commerce:2.4.6:p1:::::: cpe:2.3:a:adobe:commerce:2.4.6:p2:::::: cpe:2.3:a:adobe:commerce:2.4.6:p3:::::: cpe:2.3:a:adobe:commerce:2.4.6:p4:::::: cpe:2.3:a:adobe:commerce:2.4.6:p5:::::: cpe:2.3:a:adobe:commerce:2.4.6:p6:::::: cpe:2.3:a:adobe:commerce:2.4.6:p7:::::: cpe:2.3:a:adobe:commerce:2.4.6:p8:::::: cpe:2.3:a:adobe:commerce:2.4.7:-:::::: cpe:2.3:a:adobe:commerce:2.4.7:p1:::::: cpe:2.3:a:adobe:commerce:2.4.7:p2:::::: cpe:2.3:a:adobe:commerce:2.4.7:p3:::::: cpe:2.3:a:adobe:commerce:2.4.8:beta1:::::: cpe:2.3:a:adobe:commerce_b2b:::::::: cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:::::: cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:::::: cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:::::: cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:::::: cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:::::: cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:::::: cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:::::: cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:::::: cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:::::: cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:::::: cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:::::: cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:::::: cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:::::: cpe:2.3:a:adobe:commerce_b2b:1.5.0:::::::* cpe:2.3:a:adobe:magento:::::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:-:::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:p10:::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:p11:::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:p1:::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:p2:::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:p3:::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:p4:::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:p5:::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:p6:::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:p7:::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:p8:::open_source:::* cpe:2.3:a:adobe:magento:2.4.4:p9:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:-:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p10:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p1:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p2:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p3:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p4:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p5:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p6:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p7:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p8:::open_source:::* cpe:2.3:a:adobe:magento:2.4.5:p9:::open_source:::* cpe:2.3:a:adobe:magento:2.4.6:-:::open_source:::* cpe:2.3:a:adobe:magento:2.4.6:p1:::open_source:::* cpe:2.3:a:adobe:magento:2.4.6:p2:::open_source:::* cpe:2.3:a:adobe:magento:2.4.6:p3:::open_source:::* cpe:2.3:a:adobe:magento:2.4.6:p4:::open_source:::* cpe:2.3:a:adobe:magento:2.4.6:p5:::open_source:::* cpe:2.3:a:adobe:magento:2.4.6:p6:::open_source:::* cpe:2.3:a:adobe:magento:2.4.6:p7:::open_source:::* cpe:2.3:a:adobe:magento:2.4.6:p8:::open_source:::* cpe:2.3:a:adobe:magento:2.4.7:-:::open_source:::* cpe:2.3:a:adobe:magento:2.4.7:p1:::open_source:::* cpe:2.3:a:adobe:magento:2.4.7:p2:::open_source:::* cpe:2.3:a:adobe:magento:2.4.7:p3:::open_source:::* cpe:2.3:a:adobe:magento:2.4.8:beta1:::open_source:::*
Vendors & Products		Adobe Adobe commerce Adobe commerce B2b Adobe magento

Type	Values Removed	Values Added
Description	Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.	Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high.
Title		Adobe Commerce \| Cross-site Scripting (Stored XSS) (CWE-79)
Weaknesses		CWE-79
References		https://helpx.adobe.com/security/products/magento/apsb25-08.html
Metrics		cvssV3_1 `{'score': 8.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-24412", "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "state": "PUBLISHED", "assignerShortName": "adobe", "dateReserved": "2025-01-21T17:00:45.700Z", "datePublished": "2025-02-11T17:37:36.216Z", "dateUpdated": "2025-02-27T20:38:13.659Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "Adobe Commerce", "vendor": "Adobe", "versions": [{"lessThanOrEqual": "2.4.8-beta1", "status": "affected", "version": "0", "versionType": "semver"}]}], "datePublic": "2025-02-11T17:00:00.000Z", "descriptions": [{"lang": "en", "value": "Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "environmentalScore": 8.7, "environmentalSeverity": "HIGH", "exploitCodeMaturity": "NOT_DEFINED", "integrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "LOW", "modifiedAttackVector": "NETWORK", "modifiedAvailabilityImpact": "NONE", "modifiedConfidentialityImpact": "HIGH", "modifiedIntegrityImpact": "HIGH", "modifiedPrivilegesRequired": "LOW", "modifiedScope": "CHANGED", "modifiedUserInteraction": "REQUIRED", "privilegesRequired": "LOW", "remediationLevel": "NOT_DEFINED", "reportConfidence": "NOT_DEFINED", "scope": "CHANGED", "temporalScore": 8.7, "temporalSeverity": "HIGH", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "Cross-site Scripting (Stored XSS) (CWE-79)", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe", "dateUpdated": "2025-02-27T20:38:13.659Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://helpx.adobe.com/security/products/magento/apsb25-08.html"}], "source": {"discovery": "EXTERNAL"}, "title": "Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-13T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2025-24412"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-14T04:55:40.614Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-24412 (string)

assignerOrgId : 078d4453-3bcd-4900-85e6-15281da43538 (string)

state : PUBLISHED (string)

assignerShortName : adobe (string)

dateReserved : 2025-01-21T17:00:45.700Z (string)

datePublished : 2025-02-11T17:37:36.216Z (string)

dateUpdated : 2025-02-27T20:38:13.659Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : affected (string)

product : Adobe Commerce (string)

vendor : Adobe (string)

versions : [ »

0 : { »

lessThanOrEqual : 2.4.8-beta1 (string)

status : affected (string)

version : 0 (string)

versionType : semver (string)

}

]

}

]

datePublic : 2025-02-11T17:00:00.000Z (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

availabilityRequirement : NOT_DEFINED (string)

baseScore : 8.7 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

confidentialityRequirement : NOT_DEFINED (string)

environmentalScore : 8.7 (number)

environmentalSeverity : HIGH (string)

exploitCodeMaturity : NOT_DEFINED (string)

integrityImpact : HIGH (string)

integrityRequirement : NOT_DEFINED (string)

modifiedAttackComplexity : LOW (string)

modifiedAttackVector : NETWORK (string)

modifiedAvailabilityImpact : NONE (string)

modifiedConfidentialityImpact : HIGH (string)

modifiedIntegrityImpact : HIGH (string)

modifiedPrivilegesRequired : LOW (string)

modifiedScope : CHANGED (string)

modifiedUserInteraction : REQUIRED (string)

privilegesRequired : LOW (string)

remediationLevel : NOT_DEFINED (string)

reportConfidence : NOT_DEFINED (string)

scope : CHANGED (string)

temporalScore : 8.7 (number)

temporalSeverity : HIGH (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-79 (string)

description : Cross-site Scripting (Stored XSS) (CWE-79) (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 078d4453-3bcd-4900-85e6-15281da43538 (string)

shortName : adobe (string)

dateUpdated : 2025-02-27T20:38:13.659Z (string)

}

references : [ »

0 : { »

tags : [ »

0 : vendor-advisory (string)

]

url : https://helpx.adobe.com/security/products/magento/apsb25-08.html (string)

}

]

source : { »

discovery : EXTERNAL (string)

}

title : Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-02-13T00:00:00+00:00 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

id : CVE-2025-24412 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-14T04:55:40.614Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-24412", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-11T18:50:44.743746Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-11T18:50:46.175Z"}}], "cna": {"title": "Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)", "source": {"discovery": "EXTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "modifiedScope": "CHANGED", "temporalScore": 8.7, "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "remediationLevel": "NOT_DEFINED", "reportConfidence": "NOT_DEFINED", "temporalSeverity": "HIGH", "availabilityImpact": "NONE", "environmentalScore": 8.7, "privilegesRequired": "LOW", "exploitCodeMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NETWORK", "confidentialityImpact": "HIGH", "environmentalSeverity": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedIntegrityImpact": "HIGH", "modifiedUserInteraction": "REQUIRED", "modifiedAttackComplexity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAvailabilityImpact": "NONE", "modifiedPrivilegesRequired": "LOW", "modifiedConfidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Adobe", "product": "Adobe Commerce", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.4.8-beta1"}], "defaultStatus": "affected"}], "datePublic": "2025-02-11T17:00:00.000Z", "references": [{"url": "https://helpx.adobe.com/security/products/magento/apsb25-08.html", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-79", "description": "Cross-site Scripting (Stored XSS) (CWE-79)"}]}], "providerMetadata": {"orgId": "078d4453-3bcd-4900-85e6-15281da43538", "shortName": "adobe", "dateUpdated": "2025-02-25T21:39:45.984Z"}}}, "cveMetadata": {"cveId": "CVE-2025-24412", "state": "PUBLISHED", "dateUpdated": "2025-02-25T21:39:45.984Z", "dateReserved": "2025-01-21T17:00:45.700Z", "assignerOrgId": "078d4453-3bcd-4900-85e6-15281da43538", "datePublished": "2025-02-11T17:37:36.216Z", "assignerShortName": "adobe"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-24412 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-02-11T18:50:44.743746Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-11T18:50:46.175Z (string)

}

]

cna : { »

title : Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79) (string)

source : { »

discovery : EXTERNAL (string)

}

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 8.7 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N (string)

modifiedScope : CHANGED (string)

temporalScore : 8.7 (number)

integrityImpact : HIGH (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

remediationLevel : NOT_DEFINED (string)

reportConfidence : NOT_DEFINED (string)

temporalSeverity : HIGH (string)

availabilityImpact : NONE (string)

environmentalScore : 8.7 (number)

privilegesRequired : LOW (string)

exploitCodeMaturity : NOT_DEFINED (string)

integrityRequirement : NOT_DEFINED (string)

modifiedAttackVector : NETWORK (string)

confidentialityImpact : HIGH (string)

environmentalSeverity : HIGH (string)

availabilityRequirement : NOT_DEFINED (string)

modifiedIntegrityImpact : HIGH (string)

modifiedUserInteraction : REQUIRED (string)

modifiedAttackComplexity : LOW (string)

confidentialityRequirement : NOT_DEFINED (string)

modifiedAvailabilityImpact : NONE (string)

modifiedPrivilegesRequired : LOW (string)

modifiedConfidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Adobe (string)

product : Adobe Commerce (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

versionType : semver (string)

lessThanOrEqual : 2.4.8-beta1 (string)

}

]

defaultStatus : affected (string)

}

]

datePublic : 2025-02-11T17:00:00.000Z (string)

references : [ »

0 : { »

url : https://helpx.adobe.com/security/products/magento/apsb25-08.html (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-79 (string)

description : Cross-site Scripting (Stored XSS) (CWE-79) (string)

}

]

}

]

providerMetadata : { »

orgId : 078d4453-3bcd-4900-85e6-15281da43538 (string)

shortName : adobe (string)

dateUpdated : 2025-02-25T21:39:45.984Z (string)

}

cveMetadata : { »

cveId : CVE-2025-24412 (string)

state : PUBLISHED (string)

dateUpdated : 2025-02-25T21:39:45.984Z (string)

dateReserved : 2025-01-21T17:00:45.700Z (string)

assignerOrgId : 078d4453-3bcd-4900-85e6-15281da43538 (string)

datePublished : 2025-02-11T17:37:36.216Z (string)

assignerShortName : adobe (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*", "matchCriteriaId": "76AAB57F-7723-44E0-B91A-9F120C849AC4", "versionEndExcluding": "2.4.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*", "matchCriteriaId": "D258D9EF-94FB-41F0-A7A5-7F66FA7A0055", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*", "matchCriteriaId": "4E5CF6F0-2388-4D3F-8FE1-43B8AF148564", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*", "matchCriteriaId": "1C3D7164-1C5F-40BC-9EEC-B0E00CD45808", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*", "matchCriteriaId": "68AAE162-5957-42AF-BE20-40F341837FAC", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*", "matchCriteriaId": "D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*", "matchCriteriaId": "CFEBDDF2-6443-4482-83B2-3CD272CF599F", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*", "matchCriteriaId": "6661093F-8D22-450F-BC6C-A8894A52E6A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*", "matchCriteriaId": "2515DA6D-2E74-4A05-BD29-FEEF3322BCB6", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*", "matchCriteriaId": "69A1F1F7-E53C-40F3-B3D9-DC011FC353BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*", "matchCriteriaId": "6A56E96C-6CE5-442C-AA88-F0059B02B5E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*", "matchCriteriaId": "8867F510-201C-4199-8554-53DE156CE669", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*", "matchCriteriaId": "23988132-DD4E-4968-B6B8-954122F76081", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*", "matchCriteriaId": "9B07F7B2-E915-4EFF-8FFC-91143CEF082E", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*", "matchCriteriaId": "7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*", "matchCriteriaId": "5764CC97-C866-415D-A3A1-5B5B9E1C06A6", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*", "matchCriteriaId": "8605E4E6-0F7D-42C8-B35B-2349A0BEFC69", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*", "matchCriteriaId": "B6318F97-E59A-4425-8DC7-045C78A644F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*", "matchCriteriaId": "324A573E-DBC8-42A0-8CB8-EDD8FBAB7115", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*", "matchCriteriaId": "54151A00-CFB8-4E6A-8E74-497CB67BF7E2", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*", "matchCriteriaId": "6DF0E74D-9293-4209-97D1-A3BA13C3DDE9", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*", "matchCriteriaId": "8922D646-1A97-47ED-91C6-5A426781C98A", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*", "matchCriteriaId": "952787C6-9BF1-49FB-9824-1236678E1902", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*", "matchCriteriaId": "898A8679-3C46-4718-9EDF-583ADDFCF2EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*", "matchCriteriaId": "7C7AFBB1-F9C9-4BDE-BCEF-94C9F0AC6798", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*", "matchCriteriaId": "D6086841-C175-46A1-8414-71C6163A0E7A", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*", "matchCriteriaId": "D2E0DDD1-0F4A-4F96-B25D-40A39A1A535A", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*", "matchCriteriaId": "A576B1B5-73A2-431E-998F-7E5458B51D6A", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*", "matchCriteriaId": "0E05F4AC-2A28-47E3-96DE-0E31AF73CD43", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*", "matchCriteriaId": "3A9A62EE-1649-4815-8EC9-7AEF7949EB2F", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*", "matchCriteriaId": "E58690F9-FA9C-42A0-B4CD-91FD1197A53E", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*", "matchCriteriaId": "77D01D8B-1FBC-43CA-90F9-C89D9B4D18F0", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*", "matchCriteriaId": "8B83729E-80AF-47CE-A70C-32BF83024A40", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*", "matchCriteriaId": "B5D04853-0C2F-47DD-A939-3A8F6E22CB7D", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*", "matchCriteriaId": "2E05341A-C70C-4B3D-AF30-9520D6B97D30", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*", "matchCriteriaId": "4D98B52E-3B59-4327-AC7E-DDBB0ADA08F6", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*", "matchCriteriaId": "95026AA9-A28B-4D94-BD77-7628429EBA30", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*", "matchCriteriaId": "6D05A958-9749-486A-A149-C21647CDCADF", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:*", "matchCriteriaId": "28120C2E-10AD-4476-B6C3-BE3A43946068", "versionEndExcluding": "1.3.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*", "matchCriteriaId": "C4667AA3-4CC9-41C0-8E0C-19B0FCE1CF79", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*", "matchCriteriaId": "2ADE32D1-2845-4030-BE1F-ECE28189D0F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*", "matchCriteriaId": "F2E771C9-86C4-455C-98D4-6F4FE7A9A822", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*", "matchCriteriaId": "1C90C433-6655-4038-9AB3-0304C1AFF360", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*", "matchCriteriaId": "89BAB227-03E6-4776-ADE4-9D9CB666EFD9", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*", "matchCriteriaId": "6E94B136-7A2C-47F0-BCE4-6BB8E776A305", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*", "matchCriteriaId": "3C5C3F26-24F0-4CF5-AA2E-7CA13E9D17DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*", "matchCriteriaId": "66F3EA5F-08A2-4A1E-82D3-BBE7FFA2667E", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*", "matchCriteriaId": "7930F188-A689-4041-BF4F-FBCA579D2E49", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*", "matchCriteriaId": "15C638A8-EFE0-47DB-B1F9-34093AF0FC17", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*", "matchCriteriaId": "CB863404-A9D7-4692-AB43-08945E669928", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*", "matchCriteriaId": "D8CFA8F4-D57D-4D0F-88D5-00A72E3AD8DA", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*", "matchCriteriaId": "A21F608C-C356-47B8-8FBB-DB28BABFC4C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:commerce_b2b:1.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "E6DF9B16-DF4F-4EFC-8747-2CEEA71477DB", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*", "matchCriteriaId": "8D484416-4968-408A-861A-9130CEBEF37E", "versionEndExcluding": "2.4.4", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*", "matchCriteriaId": "AC641EFE-3B9B-4988-A143-FE1F6FD0D689", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*", "matchCriteriaId": "5F7AA4A6-69E3-4BA4-A476-CA37F41D5482", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:*", "matchCriteriaId": "3465841A-1CE5-4173-A795-48881146618B", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.4:p11:*:*:open_source:*:*:*", "matchCriteriaId": "3252B090-DE40-4F56-B55A-BE20DA2AF606", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*", "matchCriteriaId": "A3D05570-FA72-4FCF-90E9-EC19731CD9F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*", "matchCriteriaId": "7DF079F1-1886-4974-A0F0-82DEA88F2E83", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*", "matchCriteriaId": "C4E7AFE2-E02D-4C7D-B9C3-CEF345F1287C", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*", "matchCriteriaId": "F39BCCFC-4748-4626-8E35-4BD299CE42A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*", "matchCriteriaId": "EB9003A6-F5CC-463F-AC3A-C76F96A39F45", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*", "matchCriteriaId": "10DBD0CA-AFC2-4E12-9239-C2FBE778E6E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*", "matchCriteriaId": "FBB3AA19-BF6C-4C4B-A213-494D35F08D99", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*", "matchCriteriaId": "6FE43B88-BCD6-4ADF-94E7-81EC15550A67", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*", "matchCriteriaId": "7A41C717-4B9F-4972-ABA3-2294EEC20F3E", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*", "matchCriteriaId": "3FA80BBC-2DF2-46E1-84CE-8A899415114E", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:*", "matchCriteriaId": "783E4AF1-52F3-446B-B003-8079EDA78CBF", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*", "matchCriteriaId": "510B1840-AE77-4BDD-9C09-26C64CC8FC81", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*", "matchCriteriaId": "FA1EDF58-8384-48C4-A584-54D24F6F7973", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*", "matchCriteriaId": "9D2D9715-3A6B-4BE0-B1C5-8D19A683A083", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*", "matchCriteriaId": "1C99B578-5DD6-476D-BB75-4DCAD7F79535", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*", "matchCriteriaId": "7C1B2897-79A5-4A5B-9137-7A4B6B85AA84", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*", "matchCriteriaId": "B9E8299D-FA97-483A-8E1B-BA7B869E467D", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*", "matchCriteriaId": "9A1B92EC-E83A-43B3-8F14-5C1A52B579B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*", "matchCriteriaId": "E5F2B6F1-AE8F-4AEE-9AB3-080976AE48B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*", "matchCriteriaId": "789BD987-9DAD-4EAE-93DE-0E267D54F124", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*", "matchCriteriaId": "A3F113C0-00C5-4BC2-B42B-8AE3756252F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*", "matchCriteriaId": "02592D65-2D2C-460A-A970-8A18F9B156ED", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*", "matchCriteriaId": "457B89CF-C75E-4ED6-8603-9C52BA462A9E", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*", "matchCriteriaId": "A572A2DC-2DAB-4ABE-8FC2-5AF2340C826F", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*", "matchCriteriaId": "2A2DD9C6-BAF5-4DF5-9C14-3478923B2019", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*", "matchCriteriaId": "BA9CFC70-24CF-4DFA-AEF9-9B5A9DAF837D", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*", "matchCriteriaId": "2AA0B806-ABB8-4C18-9F9C-8291BE208F52", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*", "matchCriteriaId": "AA9D4DAB-7567-48D7-BE60-2A10B35CFF27", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*", "matchCriteriaId": "0E06FE04-8844-4409-92D9-4972B47C921B", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*", "matchCriteriaId": "9C77154A-DBFE-48C3-A274-03075A0DB040", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*", "matchCriteriaId": "F5AAC414-623C-444F-9BD5-EE0ACE2B2246", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*", "matchCriteriaId": "8292888D-B0B0-4DF3-8719-EA4CDCAB39D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*", "matchCriteriaId": "59C10C74-FDB1-46EC-8F41-F3AC24AEFB7D", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim\u2019s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high."}, {"lang": "es", "value": "Las versiones 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 y anteriores de Adobe Commerce se ven afectadas por una vulnerabilidad de Cross-Site Scripting (XSS) almacenado que un atacante con pocos privilegios podr\u00eda aprovechar para inyectar secuencias de comandos maliciosas en campos de formulario vulnerables. Se puede ejecutar c\u00f3digo JavaScript malicioso en el navegador de una v\u00edctima cuando esta accede a la p\u00e1gina que contiene el campo vulnerable. Un atacante con \u00e9xito puede aprovechar esto para lograr la toma de control de la sesi\u00f3n, lo que aumenta el impacto en la confidencialidad y la integridad."}], "id": "CVE-2025-24412", "lastModified": "2025-04-16T17:17:56.930", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 5.8, "source": "psirt@adobe.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 5.8, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2025-02-11T18:15:42.433", "references": [{"source": "psirt@adobe.com", "tags": ["Vendor Advisory"], "url": "https://helpx.adobe.com/security/products/magento/apsb25-08.html"}], "sourceIdentifier": "psirt@adobe.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "psirt@adobe.com", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 76AAB57F-7723-44E0-B91A-9F120C849AC4 (string)

versionEndExcluding : 2.4.4 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:* (string)

matchCriteriaId : D258D9EF-94FB-41F0-A7A5-7F66FA7A0055 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:* (string)

matchCriteriaId : 4E5CF6F0-2388-4D3F-8FE1-43B8AF148564 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:* (string)

matchCriteriaId : 1C3D7164-1C5F-40BC-9EEC-B0E00CD45808 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:* (string)

matchCriteriaId : 68AAE162-5957-42AF-BE20-40F341837FAC (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:* (string)

matchCriteriaId : D6D6F1A7-ABB5-4EDC-9EA8-98B74518847A (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:* (string)

matchCriteriaId : CFEBDDF2-6443-4482-83B2-3CD272CF599F (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:* (string)

matchCriteriaId : 6661093F-8D22-450F-BC6C-A8894A52E6A9 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:* (string)

matchCriteriaId : 2515DA6D-2E74-4A05-BD29-FEEF3322BCB6 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:* (string)

matchCriteriaId : 69A1F1F7-E53C-40F3-B3D9-DC011FC353BF (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:* (string)

matchCriteriaId : 6A56E96C-6CE5-442C-AA88-F0059B02B5E7 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:* (string)

matchCriteriaId : 8867F510-201C-4199-8554-53DE156CE669 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:* (string)

matchCriteriaId : 23988132-DD4E-4968-B6B8-954122F76081 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:* (string)

matchCriteriaId : 9B07F7B2-E915-4EFF-8FFC-91143CEF082E (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:* (string)

matchCriteriaId : 7F5E9DB6-1386-4274-8270-2FE0F0CAF7FD (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:* (string)

matchCriteriaId : 5764CC97-C866-415D-A3A1-5B5B9E1C06A6 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:* (string)

matchCriteriaId : 8605E4E6-0F7D-42C8-B35B-2349A0BEFC69 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:* (string)

matchCriteriaId : B6318F97-E59A-4425-8DC7-045C78A644F8 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:* (string)

matchCriteriaId : 324A573E-DBC8-42A0-8CB8-EDD8FBAB7115 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:* (string)

matchCriteriaId : 54151A00-CFB8-4E6A-8E74-497CB67BF7E2 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:* (string)

matchCriteriaId : 6DF0E74D-9293-4209-97D1-A3BA13C3DDE9 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:* (string)

matchCriteriaId : 8922D646-1A97-47ED-91C6-5A426781C98A (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:* (string)

matchCriteriaId : 952787C6-9BF1-49FB-9824-1236678E1902 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:* (string)

matchCriteriaId : 898A8679-3C46-4718-9EDF-583ADDFCF2EC (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:* (string)

matchCriteriaId : 7C7AFBB1-F9C9-4BDE-BCEF-94C9F0AC6798 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:* (string)

matchCriteriaId : D6086841-C175-46A1-8414-71C6163A0E7A (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:* (string)

matchCriteriaId : D2E0DDD1-0F4A-4F96-B25D-40A39A1A535A (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:* (string)

matchCriteriaId : A576B1B5-73A2-431E-998F-7E5458B51D6A (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:* (string)

matchCriteriaId : 0E05F4AC-2A28-47E3-96DE-0E31AF73CD43 (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:* (string)

matchCriteriaId : 3A9A62EE-1649-4815-8EC9-7AEF7949EB2F (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:* (string)

matchCriteriaId : E58690F9-FA9C-42A0-B4CD-91FD1197A53E (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:* (string)

matchCriteriaId : 77D01D8B-1FBC-43CA-90F9-C89D9B4D18F0 (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:* (string)

matchCriteriaId : 8B83729E-80AF-47CE-A70C-32BF83024A40 (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:* (string)

matchCriteriaId : B5D04853-0C2F-47DD-A939-3A8F6E22CB7D (string)

vulnerable : true (boolean)

}

34 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:* (string)

matchCriteriaId : 2E05341A-C70C-4B3D-AF30-9520D6B97D30 (string)

vulnerable : true (boolean)

}

35 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:* (string)

matchCriteriaId : 4D98B52E-3B59-4327-AC7E-DDBB0ADA08F6 (string)

vulnerable : true (boolean)

}

36 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:* (string)

matchCriteriaId : 95026AA9-A28B-4D94-BD77-7628429EBA30 (string)

vulnerable : true (boolean)

}

37 : { »

criteria : cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:* (string)

matchCriteriaId : 6D05A958-9749-486A-A149-C21647CDCADF (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 28120C2E-10AD-4476-B6C3-BE3A43946068 (string)

versionEndExcluding : 1.3.3 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:* (string)

matchCriteriaId : C4667AA3-4CC9-41C0-8E0C-19B0FCE1CF79 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:* (string)

matchCriteriaId : 2ADE32D1-2845-4030-BE1F-ECE28189D0F9 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:* (string)

matchCriteriaId : F2E771C9-86C4-455C-98D4-6F4FE7A9A822 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:* (string)

matchCriteriaId : 1C90C433-6655-4038-9AB3-0304C1AFF360 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:* (string)

matchCriteriaId : 89BAB227-03E6-4776-ADE4-9D9CB666EFD9 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:* (string)

matchCriteriaId : 6E94B136-7A2C-47F0-BCE4-6BB8E776A305 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:* (string)

matchCriteriaId : 3C5C3F26-24F0-4CF5-AA2E-7CA13E9D17DB (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:* (string)

matchCriteriaId : 66F3EA5F-08A2-4A1E-82D3-BBE7FFA2667E (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:* (string)

matchCriteriaId : 7930F188-A689-4041-BF4F-FBCA579D2E49 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:* (string)

matchCriteriaId : 15C638A8-EFE0-47DB-B1F9-34093AF0FC17 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:* (string)

matchCriteriaId : CB863404-A9D7-4692-AB43-08945E669928 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:* (string)

matchCriteriaId : D8CFA8F4-D57D-4D0F-88D5-00A72E3AD8DA (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:* (string)

matchCriteriaId : A21F608C-C356-47B8-8FBB-DB28BABFC4C6 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:adobe:commerce_b2b:1.5.0:*:*:*:*:*:*:* (string)

matchCriteriaId : E6DF9B16-DF4F-4EFC-8747-2CEEA71477DB (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:* (string)

matchCriteriaId : 8D484416-4968-408A-861A-9130CEBEF37E (string)

versionEndExcluding : 2.4.4 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:* (string)

matchCriteriaId : AC641EFE-3B9B-4988-A143-FE1F6FD0D689 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:* (string)

matchCriteriaId : 5F7AA4A6-69E3-4BA4-A476-CA37F41D5482 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:* (string)

matchCriteriaId : 3465841A-1CE5-4173-A795-48881146618B (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.4:p11:*:*:open_source:*:*:* (string)

matchCriteriaId : 3252B090-DE40-4F56-B55A-BE20DA2AF606 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:* (string)

matchCriteriaId : A3D05570-FA72-4FCF-90E9-EC19731CD9F7 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:* (string)

matchCriteriaId : 7DF079F1-1886-4974-A0F0-82DEA88F2E83 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:* (string)

matchCriteriaId : C4E7AFE2-E02D-4C7D-B9C3-CEF345F1287C (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:* (string)

matchCriteriaId : F39BCCFC-4748-4626-8E35-4BD299CE42A5 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:* (string)

matchCriteriaId : EB9003A6-F5CC-463F-AC3A-C76F96A39F45 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:* (string)

matchCriteriaId : 10DBD0CA-AFC2-4E12-9239-C2FBE778E6E4 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:* (string)

matchCriteriaId : FBB3AA19-BF6C-4C4B-A213-494D35F08D99 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:* (string)

matchCriteriaId : 6FE43B88-BCD6-4ADF-94E7-81EC15550A67 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:* (string)

matchCriteriaId : 7A41C717-4B9F-4972-ABA3-2294EEC20F3E (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:* (string)

matchCriteriaId : 3FA80BBC-2DF2-46E1-84CE-8A899415114E (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:* (string)

matchCriteriaId : 783E4AF1-52F3-446B-B003-8079EDA78CBF (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:* (string)

matchCriteriaId : 510B1840-AE77-4BDD-9C09-26C64CC8FC81 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:* (string)

matchCriteriaId : FA1EDF58-8384-48C4-A584-54D24F6F7973 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:* (string)

matchCriteriaId : 9D2D9715-3A6B-4BE0-B1C5-8D19A683A083 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:* (string)

matchCriteriaId : 1C99B578-5DD6-476D-BB75-4DCAD7F79535 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:* (string)

matchCriteriaId : 7C1B2897-79A5-4A5B-9137-7A4B6B85AA84 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:* (string)

matchCriteriaId : B9E8299D-FA97-483A-8E1B-BA7B869E467D (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:* (string)

matchCriteriaId : 9A1B92EC-E83A-43B3-8F14-5C1A52B579B1 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:* (string)

matchCriteriaId : E5F2B6F1-AE8F-4AEE-9AB3-080976AE48B7 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:* (string)

matchCriteriaId : 789BD987-9DAD-4EAE-93DE-0E267D54F124 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:* (string)

matchCriteriaId : A3F113C0-00C5-4BC2-B42B-8AE3756252F2 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:* (string)

matchCriteriaId : 02592D65-2D2C-460A-A970-8A18F9B156ED (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:* (string)

matchCriteriaId : 457B89CF-C75E-4ED6-8603-9C52BA462A9E (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:* (string)

matchCriteriaId : A572A2DC-2DAB-4ABE-8FC2-5AF2340C826F (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:* (string)

matchCriteriaId : 2A2DD9C6-BAF5-4DF5-9C14-3478923B2019 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:* (string)

matchCriteriaId : BA9CFC70-24CF-4DFA-AEF9-9B5A9DAF837D (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:* (string)

matchCriteriaId : 2AA0B806-ABB8-4C18-9F9C-8291BE208F52 (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:* (string)

matchCriteriaId : AA9D4DAB-7567-48D7-BE60-2A10B35CFF27 (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:* (string)

matchCriteriaId : 0E06FE04-8844-4409-92D9-4972B47C921B (string)

vulnerable : true (boolean)

}

34 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:* (string)

matchCriteriaId : 9C77154A-DBFE-48C3-A274-03075A0DB040 (string)

vulnerable : true (boolean)

}

35 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:* (string)

matchCriteriaId : F5AAC414-623C-444F-9BD5-EE0ACE2B2246 (string)

vulnerable : true (boolean)

}

36 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:* (string)

matchCriteriaId : 8292888D-B0B0-4DF3-8719-EA4CDCAB39D1 (string)

vulnerable : true (boolean)

}

37 : { »

criteria : cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:* (string)

matchCriteriaId : 59C10C74-FDB1-46EC-8F41-F3AC24AEFB7D (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality and integrity impact as high. (string)

}

1 : { »

lang : es (string)

value : Las versiones 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 y anteriores de Adobe Commerce se ven afectadas por una vulnerabilidad de Cross-Site Scripting (XSS) almacenado que un atacante con pocos privilegios podría aprovechar para inyectar secuencias de comandos maliciosas en campos de formulario vulnerables. Se puede ejecutar código JavaScript malicioso en el navegador de una víctima cuando esta accede a la página que contiene el campo vulnerable. Un atacante con éxito puede aprovechar esto para lograr la toma de control de la sesión, lo que aumenta el impacto en la confidencialidad y la integridad. (string)

}

]

id : CVE-2025-24412 (string)

lastModified : 2025-04-16T17:17:56.930 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 8.7 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.3 (number)

impactScore : 5.8 (number)

source : psirt@adobe.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 8.7 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : CHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.3 (number)

impactScore : 5.8 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2025-02-11T18:15:42.433 (string)

references : [ »

0 : { »

source : psirt@adobe.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://helpx.adobe.com/security/products/magento/apsb25-08.html (string)

}

]

sourceIdentifier : psirt@adobe.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-79 (string)

}

]

source : psirt@adobe.com (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object