漏洞标题
Adobe Commerce 将路径名限制在受限目录中的不当限制，导致 arbitrary code execution
漏洞描述信息
Adobe Commerce对受限目录的路径名限制不当，可能导致任意代码执行。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
漏洞类别
N/A
漏洞标题
Adobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution
漏洞描述信息
Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could be abused by an attacker to inject malicious scripts into the vulnerable endpoint. A low privileged attacker could leverage this vulnerability to read local files and to perform Stored XSS. Exploitation of this issue does not require user interaction.
CVSS信息
N/A
漏洞类别
对路径名的限制不恰当(路径遍历)
漏洞标题
Adobe Magento Open Source 路径遍历漏洞
漏洞描述信息
Magento Open Source是提供基本的电子商务功能，允许您从头开始构建独特的在线商店。 Adobe Magento Open Source存在路径遍历漏洞，目前尚无此漏洞的相关信息，请随时关注CNNVD或厂商公告。
CVSS信息
N/A
漏洞类别
路径遍历