Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

Affected Packages

Packagist magento/community-edition

Affected versions: 2.4.3-p1 (fixed in 2.4.3-p2)

Packagist magento/community-edition

Affected versions: 2.3.7-p1 (fixed in 2.3.7-p3)

Packagist magento/project-community-edition

Affected versions: 0 (last affected: 2.0.2)

Related CVEs

CVE-2022-24093

Key Information

GHSA ID

GHSA-5xmp-7wg5-x68q

Published

September 18, 2023 3:30 PM

Last Modified

March 4, 2025 6:19 PM

CVSS Score

5.0 /10

Primary Ecosystem

Packagist

Primary Package

magento/community-edition

GitHub Reviewed

✓ Yes

Dataset

Last updated: August 1, 2025 6:44 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.