Severity
High
Analysis Summary
CVE-2022-24086
Adobe Commerce and Magento Open Source allow a remote attacker to execute arbitrary code on the system, caused by improper input validation. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
- Code Execution
Indicators of Compromise
CVE
- CVE-2022-24086
Affected Vendors
- Adobe
Affected Products
- Adobe Commerce 2.4.3-p1
- Adobe Commerce 2.3.7-p2
- Adobe Magento Open Source 2.4.3-p1
- Adobe Magento Open Source 2.3.7-p2
Remediation
Refer to Adobe Security for patch, upgrade, or suggested workaround information.

