Adobe Commerce Improper Access Control Vulnerability Allowing Privilege Escalation

A vulnerability allowing improper access control has been identified in Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier. This vulnerability could lead to privilege escalation, as a low-privileged attacker might bypass security measures and gain unauthorized access to modify certain fields. Notably, exploitation of this issue does not require user interaction.

Impact

Exploitation of this vulnerability could allow a low-privileged attacker to bypass access controls and gain unauthorized privileges, enabling them to modify restricted fields.