Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Magento Improper Input Validation Vulnerability - CVE-2022-42344 - Vulnerability Database
Magento

Magento Improper Input Validation Vulnerability - CVE-2022-42344

High
Reference: CVE-2022-42344
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-42344
Title: Magento Improper Input Validation Vulnerability
Overview:

Adobe Commerce versions 2.4.3-p2 (and earlier) 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an improper input validation vulnerability. An authenticated attacker can trigger an insecure direct object reference in the V1/customers/me endpoint to achieve information exposure and privilege escalation.