Skip to content
Threat Feed

CPE

Cpe:2.3:a:adobe:commerce:2.4.2:ext-4:*:*:*:*:*:*

1 brief RSS
critical advisory

Adobe Commerce XXE Vulnerability (CVE-2024-34102) Exploit Released

A public exploit, named CosmicSting, has been released for CVE-2024-34102, an XML External Entity (XXE) Injection vulnerability in Adobe Commerce allowing for unauthenticated remote file read, SSRF, and potential RCE.

Commerce cve-2024-34102 xxe adobe commerce magento
2r 1t 1c 1i