Adobe Commerce Webhooks vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Adobe Commerce Webhooks: 1 record(s), with affected versions and fixes.
cpe:2.3:a:adobe:commerce_webhooks

CVE-2024-34102 Critical · 9.8 KEV Urgent · 83 Public exploit CWE-611 Jun 13, 2024

Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that references external entities. Exploitation of this issue does not require user interaction.