VDB
GCVE-110-NCSC-2025-259
GCVE-110-NCSC-2025-259
Advisory PublishedCVSS 7.5/10
Adobe heeft kwetsbaarheden verholpen in Adobe Commerce en Magento (Versies 2.4.9-alpha1 en eerder).
Weaknesses (CWE)
CWE-20Improper Input ValidationCWE-352Cross-Site Request Forgery (CSRF)CWE-863Incorrect AuthorizationCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionCWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Risk Scores
CVSS 3.1
7.5/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Adobe | vers:unknown/open source <2.4.5-p14 | — | — |
| Adobe | vers:unknown/open source <2.4.6-p12 | — | — |
| Adobe | vers:unknown/2.4.7-p6 | — | — |
| Adobe | vers:unknown/2.4.5-p13 | — | — |
| Adobe | vers:unknown/2.4.9-alpha1 | — | — |
| Adobe | vers:unknown/open source <2.4.9-alpha2 | — | — |
| Adobe | vers:unknown/2.4.4-p14 | — | — |
| Adobe | vers:semver/<=2.4.4-p14 | — | — |
| Adobe | vers:unknown/2.4.6-p11 | — | — |
| Adobe | vers:unknown/open source <2.4.7-p7 | — | — |
| Adobe | vers:unknown/2.4.8-p1 | — | — |
| Adobe | vers:unknown/open source <2.4.8-p2 | — | — |
Browse GCVE Records
74,198 records in the GCVE database · Updated July 21, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.