APSB22-48 - APSB22-48: Security updates available for Adobe Commerce Security Update

Bulletin Information

• Bulletin ID: APSB22-48
• Product: APSB22-48: Security updates available for Adobe Commerce
• Published: October 11, 2022
• Priority: 3
• Severity: Critical

Affected Versions

• Adobe Commerce: 2.4.4-p1 and earlier versions
• 2.4.5 and earlier versions: All
• 2.4.3-p3 and earlier versions: All
• Magento Open Source: 2.4.4-p1 and earlier versions
• 2.4.5 and earlier versions: All
• …and 1 more versions

Vulnerability Details

Total Vulnerabilities: 2

Severity Breakdown:

• Medium: 1
• Critical: 1

Key Vulnerabilities:

1. PRODSECBUG-3177

• Category: Cross-site Scripting (Stored XSS) (CWE-79)
• Impact: Arbitrary code execution
• Severity: Critical
• CVSS Score: 10.0
• Authentication Required: No

2. PRODSECBUG-3180

• Category: Improper Access Control (CWE-284)
• Impact: Security feature bypass
• Severity: Medium
• CVSS Score: 5.3
• Authentication Required: Yes

Read Full Bulletin on Adobe Security Portal →