GHSA-8mmj-xmj8-554pMediumCVSS 4.3
Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could...
🔗 CVE IDs covered (1)
📋 Description
Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site, potentially enabling credential theft and account takeover. Exploitation of this issue requires user interaction in that a victim must click on a malicious link.