CVE-2022-24086

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-24086
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24086.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-24086
Aliases
Published
2022-02-16T17:15:13.307Z
Modified
2026-03-14T11:38:09.413025Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result in arbitrary code execution.

References

Affected packages

Git / github.com/magento/magento2

Affected ranges

Type
GIT
Repo
https://github.com/magento/magento2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f4c1d7526f05bdfb1327b0701cc345f94aadcaed
Introduced
7aa94564d85e408baea01abc5315a0441401c375
Last affected
53ad434d78cd2d357203fb82e5ea059883f403b8
Introduced
6729b6e01368248abc33300208eb292c95050203
Last affected
33242e4b19cf207d7b73f7791ef894b48bb41f8a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3c90474cbeac29921594ab97e68ca0502b5827a0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8d05e426a54cd4937b22fab079d40dfc431b6dfb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4c36116dcf878e127059d9be9566a119783583f2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8afdb9858d238392ecb5dbfe556068ec1af137bc
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f4c1d7526f05bdfb1327b0701cc345f94aadcaed
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
53ad434d78cd2d357203fb82e5ea059883f403b8
Introduced
6729b6e01368248abc33300208eb292c95050203
Last affected
33242e4b19cf207d7b73f7791ef894b48bb41f8a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3c90474cbeac29921594ab97e68ca0502b5827a0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8d05e426a54cd4937b22fab079d40dfc431b6dfb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4c36116dcf878e127059d9be9566a119783583f2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
8afdb9858d238392ecb5dbfe556068ec1af137bc
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.3.0"
        },
        {
            "introduced": "2.3.3"
        },
        {
            "last_affected": "2.3.6"
        },
        {
            "introduced": "2.4.0"
        },
        {
            "last_affected": "2.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.7-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.7-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.3-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.3-p1"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "2.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.6"
        },
        {
            "introduced": "2.4.0"
        },
        {
            "last_affected": "2.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.7-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.7-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.3-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.3-p1"
        }
    ]
}

Affected versions

2.*
2.3.3
2.4.0
2.4.1
2.4.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-24086.json"