CyberRota Analysis
AI-GeneratedAdobe Commerce is vulnerable to an improper redirect issue that allows attackers to craft malicious URLs, redirecting users to sites under their control. This could lead to credential theft and account takeover, contingent upon user interaction with the malicious link. Organizations using Adobe Commerce should prioritize addressing this vulnerability to protect their users from potential phishing attacks and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site. Exploitation of this issue requires user interaction in that a victim must click on a malicious link. Scope is changed.
Related CVEs
Other vulnerabilities affecting the same vendor(s)