VULNERABILITY INTELLIGENCE

CVE-2022-24086

CVSS score9.8 CRITICAL

EPSS probability99.20%

CISA KEVKnown exploited vulnerability

Published2022-02-16

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability

Vendor / product: Adobe / Commerce and Magento Open Source

Description

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.

Weakness classification

psirt@adobe.com: CWE-20

Primary references

psirt@adobe.com — Patch, Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Release Notes, Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Third Party Advisory, US Government Resource