CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-06-13
Adobe Commerce and Magento XML External Entity Reference (XXE) Vulnerability (CVE-2024-34102, CosmicSting) Analysis and Mitigation Guide
[Affected Scope] Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier
[Impact] Unauthenticated remote attackers can exploit this vulnerability to read arbitrary files and potentially achieve Remote Code Execution (RCE)
[Mitigation] Apply the official Adobe security patches (APSB24-40) or upgrade to the latest secure releases immediately