Vulnerability advisory
CVE-2024-20716
Force high-usage of resources by generating unlimited coupons: Adobe Commerce
Also known as GHSA-c9h9-h5gf-885r
Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/magento/magento2 ↗ | |
| 0f9a056c8d83c4f319626b3e56ec52a533999f25 through 6cc0d28cf66074adebc261e981eb35811601f813 | No fix listed |
Also listed as affected (17)
| |
Description
Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to an application denial-of-service. A high-privileged attacker could leverage this vulnerability to exhaust system resources, causing the application to slow down or crash. Exploitation of this issue does not require user interaction.