Adobe Commerce Improper Input Validation Vulnerability Leading to Denial-of-Service

A denial-of-service vulnerability has been identified in Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier. This vulnerability arises from improper input validation, allowing an attacker to send specially crafted input that disrupts application availability. Exploitation of this issue does not require user interaction.

Impact

Exploitation of this vulnerability could cause a denial-of-service condition, leading to limited disruption of application availability.

Remediation

Users are advised to update to Adobe Commerce 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16 or 2.4.4-p17. Instructions for updating can be found in the Adobe Commerce release notes.