CyberRota Analysis
AI-GeneratedAdobe Commerce is vulnerable to a path traversal flaw that allows high-privileged attackers to bypass security features and access unauthorized files or directories. This could lead to limited disruptions in availability and potential exposure of sensitive information. Organizations using Adobe Commerce should prioritize addressing this vulnerability to mitigate risks associated with unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions, causing a limited disruption to availability. Exploitation of this issue does not require user interaction. Scope is changed.
Related CVEs
Other vulnerabilities affecting the same vendor(s)