CVE-2024-34102 Adobe Commerce And Magento Open Source
Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.
- CVSS
- not scored
On CISA’s exploited list
Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability
- Added
- 2024-07-17
- Federal patch deadline
- 2024-08-07
- Ransomware use
- not known