CVE-2022-24086

Vulnerability ID

CVE-2022-24086

Severity

CRITICAL

Severity Score

9.8

Summary

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.

References

https://helpx.adobe.com/security/products/magento/apsb22-12.html

Mitigation and Patches

https://helpx.adobe.com/security/products/magento/apsb22-12.html

Exploits

https://github.com/Mr-xn/CVE-2022-24086

https://github.com/oK0mo/CVE-2022-24086-RCE-PoC

https://github.com/pescepilota/CVE-2022-24086

https://helpx.adobe.com/security/products/magento/apsb22-12.html

https://github.com/Mr-xn/CVE-2022-24086

https://github.com/shakeman8/CVE-2022-24086-RCE

https://www.cisa.gov/known-exploited-vulnerabilities-catalog