CVE-2026-21293 - Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A high-privileged attacker could exploit this vulnerability to manipulate server-side requests and access unauthorized resources. Exploitation of this issue does not require user interaction. - 漏洞详情

漏洞编号：CVE-2026-21293

风险等级：中危

漏洞来源：CVE

CVE 编号：CVE-2026-21293

CNNVD 编号：-

厂商/产品：adobe / commerce

影响范围：cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*

CWE：CWE-918

发布/更新时间：2026-03-11 / 2026-08-28

漏洞描述

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in a Security feature bypass. A high-privileged attacker could exploit this vulnerability to manipulate server-side requests and access unauthorized resources. Exploitation of this issue does not require user interaction.

漏洞描述

相关链接

相关漏洞