CVE-2023-38219

Summary

CVE-2023-38219 is a stored Cross-Site Scripting (XSS) vulnerability affecting various versions of Adobe Commerce, including 2.4.7-beta1, 2.4.6-p2, 2.4.5-p4, and 2.4.4-p5. This issue enables a low-privileged attacker to inject malicious scripts into vulnerable form fields in an admin area. By exploiting this vulnerability, an attacker could execute malicious JavaScript in a victim's browser, leading to confidentiality and integrity issues. The impact is significant as the payload is stored within the admin area.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.