GCVE-110-NCSC-2024-255

Advisory PublishedCVSS 9.8/10

Vulnetix · Advisory published June 13, 2024

Improper Access Control

Weaknesses (CWE)

CWE-611Improper Restriction of XML External Entity ReferenceCWE-287Improper AuthenticationCWE-285Improper AuthorizationCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-284Improper Access ControlCWE-20Improper Input ValidationCWE-434Unrestricted Upload of File with Dangerous TypeCWE-918Server-Side Request Forgery (SSRF)

Risk Scores

CVSS 3.1

9.8/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
adobe	magento_open_source	—	—
adobe	adobe_commerce_webhooks_plugin	—	—
adobe	adobe_commerce	—	—

Aliases

CVE-2024-34102 CVE-2024-34103 CVE-2024-34104 CVE-2024-34105 CVE-2024-34106 CVE-2024-34107 CVE-2024-34108 CVE-2024-34109 CVE-2024-34110 CVE-2024-34111

References

advisory

Browse GCVE Records

73,877 records in the GCVE database · Updated July 20, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON