Adobe Commerce and Magento Improper Input Validation Vulnerability Allowing Security Feature Bypass

A vulnerability has been identified in Adobe Commerce and Magento Open Source, specifically in versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier. This vulnerability arises from improper input validation, which could lead to a security feature bypass, with a limited impact on integrity. Notably, exploitation of this issue does not require user interaction.

Impact

Exploitation of this vulnerability could result in a security feature bypass, allowing unauthorized actions or access that should be restricted.

Remediation

Users are advised to update to Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, or 2.4.4-p17. For Magento Open Source, users should update to versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, or 2.4.5-p16.