CVE-2023-22247

Published: 2023-03-27T21:15Z

Last Modified: 2024-11-21T07:44Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Adobe Commerce versions 2.4.4-p2 (and earlier) and 2.4.5-p1 (and earlier) are affected by an XML Injection vulnerability that could lead to arbitrary file system read. An unauthenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt