CVE-2024-20720

CVSS V2 None CVSS V3 None
Description
Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue does not require user interaction.
Overview
  • CVE ID
  • CVE-2024-20720
  • Assigner
  • adobe
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-02-15T13:39:37.766Z
  • Last Modified Date
  • 2024-06-18T20:48:07.858Z
References
Reference URL Reference Tags
https://helpx.adobe.com/security/products/magento/apsb24-03.html vendor-advisory
History
Created Old Value New Value Data Type Notes
2024-06-26 04:54:45 Added to TrackCVE