https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 04:43:39 +0000 https://vulnerability.circl.lu/vuln/CERTFR-2024-AVI-0972 CERTFR-2024-AVI-0972 https://vulnerability.circl.lu/vuln/CERTFR-2024-AVI-0972 https://vulnerability.circl.lu/vuln/bdu:2024-10331 bdu:2024-10331 https://vulnerability.circl.lu/vuln/bdu:2024-10331 https://vulnerability.circl.lu/vuln/fkie_cve-2024-49521 <p>Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction.</p> <p>Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-49521 https://vulnerability.circl.lu/vuln/ghsa-mgh2-q3fc-jjmr <p>Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction.</p> <p>Adobe Commerce versions 3.2.5 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to a security feature bypass. A low privileged attacker could exploit this vulnerability to send crafted requests from the vulnerable server to internal systems, which could result in the bypassing of security measures such as firewalls. Exploitation of this issue does not require user interaction.</p> https://vulnerability.circl.lu/vuln/ghsa-mgh2-q3fc-jjmr https://vulnerability.circl.lu/vuln/wid-sec-w-2024-3420 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Adobe Magento ausnutzen, um beliebigen Programmcode auszuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Adobe Magento ausnutzen, um beliebigen Programmcode auszuführen.</p> https://vulnerability.circl.lu/vuln/wid-sec-w-2024-3420