Most recent entries from all

bdu:2025-05396

certfr-2025-avi-0122 — De multiples vulnérabilités ont été découvertes dans les produits Adobe. Certaines d'entre elles permettent à un attaqu…

certfr-2025-avi-0122

cnvd-2025-03622

EUVD-2026-230122

fkie_cve-2025-24432

Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this race condition to alter a condition after it has been checked but before it is used, potentially bypassing rate limiting mechanisms. Exploitation of this issue does not require user interaction.

GHSA-7jmr-43qj-pw47 — Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability

Affected: Packagist: magento/community-edition, Packagist: magento/project-community-edition

Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could result in a security feature bypass. An attacker could exploit this race condition to alter a condition after it has been checked but before it is used, potentially bypassing security mechanisms. Exploitation of this issue requires user interaction.

WID-SEC-W-2025-0337 — Adobe Magento: Mehrere Schwachstellen

Ein Angreifer kann diese Schwachstellen ausnutzen, um sich erweiterte Rechte zu verschaffen, Sicherheitsmaßnahmen zu umgehen, einen Cross-Site-Scripting-Angriff durchzuführen und beliebigen Code auszuführen.