CVE-2024-20716

Fixed upstream EPSS <1%CVSS 4.9

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to an application denial-of-service. A high-privileged attacker could leverage this vulnerability to exhaust system resources, causing the application to slow down or crash. Exploitation of this issue does not require user interaction.

Published 2024-02-15 · CVE record · OSV

Products: Adobe Commerce

Fixed upstream