U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2024-20718

Change History

New CVE Received by NIST 2/15/2024 9:15:45 AM

Action Type Old Value New Value
Added CVSS V3.1

Adobe Systems Incorporated AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Added CWE

Adobe Systems Incorporated CWE-352
Added Description

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to trick a victim into performing actions they did not intend to do, which could be used to bypass security measures and gain unauthorized access. Exploitation of this issue requires user interaction, typically in the form of the victim clicking a link or visiting a malicious website.
Added Reference

Adobe Systems Incorporated https://helpx.adobe.com/security/products/magento/apsb24-03.html [No types assigned]