Adobe Commerce Business Logic Error Vulnerability Leading to Security Feature Bypass

A Business Logic Error vulnerability has been identified in Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier. This vulnerability could allow an attacker to bypass intended security mechanisms by manipulating the application's operational logic, resulting in limited unauthorized data modification. Exploitation of this vulnerability does not require user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized data modification by bypassing security features.