VDB
GCVE-110-NCSC-2025-54
GCVE-110-NCSC-2025-54
Advisory PublishedCVSS 7.5/10
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Weaknesses (CWE)
CWE-840-CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')CWE-863Incorrect AuthorizationCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-285Improper AuthorizationCWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-284Improper Access ControlCWE-657Violation of Secure Design PrinciplesCWE-367Time-of-check Time-of-use (TOCTOU) Race Condition
Risk Scores
CVSS 3.1
7.5/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| adobe | magento_open_source | — | — |
| adobe | adobe_commerce_b2b | — | — |
| adobe | adobe_commerce | — | — |
Aliases
CVE-2025-24406CVE-2025-24407CVE-2025-24408CVE-2025-24409CVE-2025-24410CVE-2025-24411CVE-2025-24412CVE-2025-24413CVE-2025-24414CVE-2025-24415CVE-2025-24416CVE-2025-24417CVE-2025-24418CVE-2025-24419CVE-2025-24420CVE-2025-24421CVE-2025-24422CVE-2025-24423CVE-2025-24424CVE-2025-24425CVE-2025-24426CVE-2025-24427CVE-2025-24428CVE-2025-24429CVE-2025-24430CVE-2025-24432CVE-2025-24434CVE-2025-24435CVE-2025-24436CVE-2025-24437CVE-2025-24438
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.