Adobe Commerce Cross-Site Request Forgery Vulnerability Leading to Denial-of-Service

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier. This vulnerability could be exploited to create a denial-of-service condition. An attacker could manipulate a logged-in user into sending a forged request to the application, potentially disrupting service availability. Exploitation requires user interaction, such as clicking a malicious link or visiting an attacker-controlled website.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing disruptions in service availability.