H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2024-07-17
Last seen2024-07-17

Confidence

—

Adobe Commerce and Magento Open Source contain an improper restriction of XML external entity reference (XXE) vulnerability that allows for remote code execution.

Labels

exploitedkev

CISA KEV context

Vendor / productAdobe Commerce and Magento Open Source
Added2024-07-17
Due date2024-08-07
2 recorded

Relationships

mitigatesMitigation
2 external

References

nvd
CVE-2024-34102
open
cwe
CWE-611
open