Loading HuntDB...

GHSA-q628-54wg-4r5q

GitHub Security Advisory

⚠ Unreviewed HIGH Has CVE

Advisory Details

Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Restriction of Excessive Authentication Attempts vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to perform brute force attacks and potentially gain unauthorized access to accounts. Exploitation of this issue does not require user interaction, but attack complexity is high.

Related CVEs

Key Information

GHSA ID
GHSA-q628-54wg-4r5q
Published
August 14, 2024 12:35 PM
Last Modified
August 14, 2024 12:35 PM
CVSS Score
7.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: August 1, 2025 6:44 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.