- 307/2024
- High
Adobe has released security updates to fix two vulnerabilities affecting Adobe Commerce and Adobe Audition.
The addressed vulnerabilities could allow the attacker to obtain sensitive information or bypass security restrictions on the affected systems.
The addressed vulnerabilities:
1. Adobe Commerce Server-Side Request Forgery Vulnerability (CVE-2024- 49521):
- CVSS: 7.7
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: Low
- User Interaction: None
- Consequences: Bypass Security
2. Adobe Audition Information Disclosure Vulnerability (CVE-2024-47449):
- CVSS: 5.5
- Attack Vector: Local
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Obtain Information
Vulnerabilities
- CVE-2024-49521
- CVE-2024-47449
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.