CyberRota Analysis
AI-GeneratedAdobe Commerce is vulnerable to an unrestricted file upload flaw that allows attackers to execute arbitrary code, potentially leading to elevated access or control over user accounts. Exploitation requires user interaction, such as visiting a malicious URL or engaging with a compromised webpage. Organizations using Adobe Commerce should prioritize patching this critical vulnerability to mitigate risks of account takeover and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user interaction in that a victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.
Related CVEs
Other vulnerabilities affecting the same vendor(s)