Vulnerability advisory

CVE-2023-26366

Validate Your Inputs | Server-Side Request Forgery (SSRF) (CWE-918)

Published Oct 13, 2023Updated Oct 28, 2026OSV record ↗

Severity

CVSS 3.xCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Affected versions

Repository

Affected commits	Fixed by commit
GIT github.com/magento/magento2 ↗
44a7b6079bcac5ba92040b16f4f74024b4f34d09 through d10435b11ada4e502dca7539f8fd31d059d3c482	No fix listed
Also listed as affected (32) `2.3.7-NA` `2.3.7-p1` `2.3.7-p2` `2.3.7-p3` `2.3.7-p4` `2.4.0-NA` `2.4.0-ext\-1` `2.4.1-NA` `2.4.1-ext\-1` `2.4.2-NA` `2.4.2-ext\-1` `2.4.2-ext\-2` `2.4.3-NA` `2.4.3-ext\-1` `2.4.3-ext\-2` `2.4.3-ext\-3` `2.4.4-NA` `2.4.4-p1` `2.4.4-p2` `2.4.4-p3` `2.4.4-p4` `2.4.4-p5` `2.4.5-NA` `2.4.5-p1` `2.4.5-p2` `2.4.5-p3` `2.4.5-p4` `2.4.5-p5` `2.4.6-NA` `2.4.6-p1` `2.4.6-p2` `2.4.7-b1`

Description

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A high-privileged authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction, scope is changed due to the fact that an attacker can enforce file read outside the application's path boundary.

CVE-2023-26366

Affected versions

Repository

Description

References