Commerce Webhooks
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:commerce_webhooks:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Commerce Webhooks (18ea2142-2928-566b-85c9-462ed74e0e0b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-34111 |
vulnerable | 2026-06-08 06:37:32.853605 |
SSRF in service connector
MEDIUM (6.5)
Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction..
Published: 2024-06-13T09:04:59.166Z
Updated: 2024-08-07T14:51:52.418Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34110 |
vulnerable | 2026-06-08 06:37:32.849977 |
RCE in the Adobe Commerce Webhook module through a legit webhook definition
HIGH (7.2)
Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. A high-privilege attacker could exploit this vulnerability by uploading a malicious file to the system, which could then be executed. Exploitation of this issue does not require user interaction.
Published: 2024-06-13T09:04:59.918Z
Updated: 2024-08-02T02:43:00.355Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34109 |
vulnerable | 2026-06-08 06:37:32.846148 |
Adobe Commerce | Improper Input Validation (CWE-20)
HIGH (7.2)
Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but admin privileges are required.
Published: 2024-06-13T09:05:00.703Z
Updated: 2024-09-17T11:08:17.339Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34108 |
vulnerable | 2026-06-08 06:37:32.841638 |
Large attack surface through legit webhook usage in Adobe Commerce
CRITICAL (9.1)
Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but admin privileges are required and scope is changed.
Published: 2024-06-13T09:04:55.355Z
Updated: 2024-08-07T14:47:37.071Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34107 |
vulnerable | 2026-06-08 06:37:32.794791 |
Adobe Commerce | Improper Access Control (CWE-284)
MEDIUM (5.3)
Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and view minor unauthorised information. Exploitation of this issue does not require user interaction.
Published: 2024-06-13T09:04:58.392Z
Updated: 2024-09-17T11:08:47.953Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34106 |
vulnerable | 2026-06-08 06:37:32.790781 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34105 |
vulnerable | 2026-06-08 06:37:32.786939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34104 |
vulnerable | 2026-06-08 06:37:32.782892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34103 |
vulnerable | 2026-06-08 06:37:32.772437 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34102 |
vulnerable | 2026-06-08 06:37:32.732997 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.