5.3

CVE-2023-38251

Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Uncontrolled Resource Consumption vulnerability that could lead in minor application denial-of-service. Exploitation of this issue does not require user interaction.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Commerce Version 2.3.7 Update -
Adobe ≫ Commerce Version 2.3.7 Update p1
Adobe ≫ Commerce Version 2.3.7 Update p2
Adobe ≫ Commerce Version 2.3.7 Update p3
Adobe ≫ Commerce Version 2.3.7 Update p4
Adobe ≫ Commerce Version 2.3.7 Update p4-ext1
Adobe ≫ Commerce Version 2.3.7 Update p4-ext2
Adobe ≫ Commerce Version 2.3.7 Update p4-ext3
Adobe ≫ Commerce Version 2.3.7 Update p4-ext4
Adobe ≫ Commerce Version 2.4.0 Update -
Adobe ≫ Commerce Version 2.4.0 Update ext-1
Adobe ≫ Commerce Version 2.4.0 Update ext-2
Adobe ≫ Commerce Version 2.4.0 Update ext-3
Adobe ≫ Commerce Version 2.4.0 Update ext-4
Adobe ≫ Commerce Version 2.4.1 Update -
Adobe ≫ Commerce Version 2.4.1 Update ext-1
Adobe ≫ Commerce Version 2.4.1 Update ext-2
Adobe ≫ Commerce Version 2.4.1 Update ext-3
Adobe ≫ Commerce Version 2.4.1 Update ext-4
Adobe ≫ Commerce Version 2.4.2 Update -
Adobe ≫ Commerce Version 2.4.2 Update ext-1
Adobe ≫ Commerce Version 2.4.2 Update ext-2
Adobe ≫ Commerce Version 2.4.2 Update ext-3
Adobe ≫ Commerce Version 2.4.2 Update ext-4
Adobe ≫ Commerce Version 2.4.3 Update -
Adobe ≫ Commerce Version 2.4.3 Update ext-1
Adobe ≫ Commerce Version 2.4.3 Update ext-2
Adobe ≫ Commerce Version 2.4.3 Update ext-3
Adobe ≫ Commerce Version 2.4.3 Update ext-4
Adobe ≫ Commerce Version 2.4.4 Update -
Adobe ≫ Commerce Version 2.4.4 Update p1
Adobe ≫ Commerce Version 2.4.4 Update p2
Adobe ≫ Commerce Version 2.4.4 Update p3
Adobe ≫ Commerce Version 2.4.4 Update p4
Adobe ≫ Commerce Version 2.4.4 Update p5
Adobe ≫ Commerce Version 2.4.5 Update -
Adobe ≫ Commerce Version 2.4.5 Update p1
Adobe ≫ Commerce Version 2.4.5 Update p2
Adobe ≫ Commerce Version 2.4.5 Update p3
Adobe ≫ Commerce Version 2.4.5 Update p4
Adobe ≫ Commerce Version 2.4.5 Update p5
Adobe ≫ Commerce Version 2.4.6 Update -
Adobe ≫ Commerce Version 2.4.6 Update p1
Adobe ≫ Commerce Version 2.4.6 Update p2
Adobe ≫ Commerce Version 2.4.7 Update b1
Adobe ≫ Magento Version 2.4.4 Update - SwEdition open_source
Adobe ≫ Magento Version 2.4.4 Update p1 SwEdition open_source
Adobe ≫ Magento Version 2.4.4 Update p2 SwEdition open_source
Adobe ≫ Magento Version 2.4.4 Update p3 SwEdition open_source
Adobe ≫ Magento Version 2.4.5 Update - SwEdition open_source
Adobe ≫ Magento Version 2.4.5 Update p1 SwEdition open_source
Adobe ≫ Magento Version 2.4.5 Update p2 SwEdition open_source
Adobe ≫ Magento Version 2.4.5 Update p3 SwEdition open_source
Adobe ≫ Magento Version 2.4.5 Update p4 SwEdition open_source
Adobe ≫ Magento Version 2.4.6 Update - SwEdition open_source
Adobe ≫ Magento Version 2.4.6 Update p1 SwEdition open_source
Adobe ≫ Magento Version 2.4.6 Update p2 SwEdition open_source
Adobe ≫ Magento Version 2.4.7 Update b1 SwEdition open_source
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.67% 0.471
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Adobe 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-400 Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource.

https://helpx.adobe.com/security/products/magento/apsb23-50.html
Vendor Advisory