CVE-2025-27188

Source
https://cve.org/CVERecord?id=CVE-2025-27188
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27188.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-27188
Aliases
Published
2025-04-08T21:15:50.393Z
Modified
2026-04-10T05:23:48.912171Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access. Exploitation of this issue does not require user interaction.

References

Affected packages

Git / github.com/magento/magento2

Affected ranges

Type
GIT
Repo
https://github.com/magento/magento2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Database specific
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.4.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.7-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.7-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.7-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.7-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.7-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.8-beta2"
        },
        {
            "introduced": "0"
        },
        {
            "fixed": "2.4.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.4-p9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.5-p9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.6-p9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.7-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.7-p1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.7-p2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.7-p3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.7-p4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.8-beta1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.4.8-beta2"
        }
    ]
}

Affected versions

0.*
0.1.0-alpha100
0.1.0-alpha101
0.1.0-alpha102
0.1.0-alpha103
0.1.0-alpha104
0.1.0-alpha105
0.1.0-alpha106
0.1.0-alpha107
0.1.0-alpha108
0.1.0-alpha89
0.1.0-alpha90
0.1.0-alpha91
0.1.0-alpha92
0.1.0-alpha93
0.1.0-alpha94
0.1.0-alpha95
0.1.0-alpha96
0.1.0-alpha97
0.1.0-alpha98
0.1.0-alpha99
0.42.0-beta1
0.42.0-beta3
0.74.0-beta1
2.*
2.0.0
2.0.0-rc
2.1.0
2.1.0-rc1
2.1.0-rc2
2.1.0-rc3
2.2.0-RC1.1
2.2.0-RC1.2
2.2.0-RC1.3
2.4.4
2.4.4-p1
2.4.4-p10
2.4.4-p11
2.4.4-p12
2.4.4-p2
2.4.4-p3
2.4.4-p4
2.4.4-p5
2.4.4-p6
2.4.4-p7
2.4.4-p8
2.4.4-p9
2.4.5
2.4.5-p1
2.4.5-p10
2.4.5-p11
2.4.5-p2
2.4.5-p3
2.4.5-p4
2.4.5-p5
2.4.5-p6
2.4.5-p7
2.4.5-p8
2.4.5-p9
2.4.6
2.4.6-p1
2.4.6-p2
2.4.6-p3
2.4.6-p4
2.4.6-p5
2.4.6-p6
2.4.6-p7
2.4.6-p8
2.4.6-p9
2.4.7
2.4.7-p1
2.4.7-p2
2.4.7-p3
2.4.7-p4
2.4.8-beta1
2.4.8-beta2

Database specific

unresolved_ranges
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "1.3.3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3.3-NA"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3.3-p10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3.3-p11"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3.3-p12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3.4-NA"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3.4-p10"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3.4-p11"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3.4-p9"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3.5-NA"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3.5-p7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3.5-p8"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.3.5-p9"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.4.2-NA"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.4.2-p1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.4.2-p2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.4.2-p3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.4.2-p4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.5.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.5.1"
            }
        ]
    }
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-27188.json"