https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:25:49 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-06796 bdu:2023-06796 https://cve.radiocsirt.org/vuln/bdu:2023-06796 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0833 certfr-2023-avi-0833 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0833 https://cve.radiocsirt.org/vuln/euvd-2026-219618 EUVD-2026-219618 https://cve.radiocsirt.org/vuln/euvd-2026-219618 https://cve.radiocsirt.org/vuln/fkie_cve-2023-26366 <p>Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction, scope is changed due to the fact that an attacker can enforce file read outside the application&#39;s path boundary.</p> <p>Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction, scope is changed due to the fact that an attacker can enforce file read outside the application&#39;s path boundary.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-26366 https://cve.radiocsirt.org/vuln/ghsa-8jxc-5f94-22vh <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction, scope is changed due to the fact that an attacker can enforce file read outside the application&#39;s path boundary.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition, Packagist: magento/project-community-edition</p> <p>Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction, scope is changed due to the fact that an attacker can enforce file read outside the application&#39;s path boundary.</p> https://cve.radiocsirt.org/vuln/ghsa-8jxc-5f94-22vh https://cve.radiocsirt.org/vuln/gsd-2023-26366 gsd-2023-26366 https://cve.radiocsirt.org/vuln/gsd-2023-26366 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2619 <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Adobe Magento ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2619