CVE-2023-29291

Published: Jun 15, 2023Modified: Nov 21, 2024

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. An admin-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.

Affected (35)

Products: Adobe: Commerce, Magento

Adobe

2 products

Commerce

Magento

Configuration A

35 vulnerable

Vulnerable Software	Affected Versions
Adobe Commerce	Version 2.3.7
Adobe Commerce	Version 2.3.7 p1
Adobe Commerce	Version 2.3.7 p2
Adobe Commerce	Version 2.3.7 p3
Adobe Commerce	Version 2.3.7 p4-ext1
Adobe Commerce	Version 2.3.7 p4-ext2
Adobe Commerce	Version 2.3.7 p4
Adobe Commerce	Version 2.4.0
Adobe Commerce	Version 2.4.0 ext-1
Adobe Commerce	Version 2.4.0 ext-2
Adobe Commerce	Version 2.4.1
Adobe Commerce	Version 2.4.1 ext-1
Adobe Commerce	Version 2.4.1 ext-2
Adobe Commerce	Version 2.4.2
Adobe Commerce	Version 2.4.2 ext-1
Adobe Commerce	Version 2.4.2 ext-2
Adobe Commerce	Version 2.4.3
Adobe Commerce	Version 2.4.3 ext-1
Adobe Commerce	Version 2.4.3 ext-2
Adobe Commerce	Version 2.4.4
Adobe Commerce	Version 2.4.4 p1
Adobe Commerce	Version 2.4.4 p2
Adobe Commerce	Version 2.4.4 p3
Adobe Commerce	Version 2.4.5
Adobe Commerce	Version 2.4.5 p1
Adobe Commerce	Version 2.4.5 p2
Adobe Commerce	Version 2.4.6
Adobe Magento	Version 2.4.4
Adobe Magento	Version 2.4.4 p1
Adobe Magento	Version 2.4.4 p2
Adobe Magento	Version 2.4.4 p3
Adobe Magento	Version 2.4.5
Adobe Magento	Version 2.4.5 p1
Adobe Magento	Version 2.4.5 p2
Adobe Magento	Version 2.4.6

Related CWEs

CWE-918

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (2)

https://helpx.adobe.com/security/products/magento/apsb23-35.html

Source: psirt@adobe.com

Vendor Advisory

https://helpx.adobe.com/security/products/magento/apsb23-35.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.