CVE-2023-38251: 
PHP vulnerability analysis and mitigation

Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Uncontrolled Resource Consumption vulnerability that could lead to minor application denial-of-service. This vulnerability was assigned CVE-2023-38251 and was discovered on July 13, 2023 (CVE Details).

The vulnerability is classified as CWE-400 (Uncontrolled Resource Consumption) with a CVSS v3.1 base score of 5.3 (Medium). The attack vector is network-based (AV:N) with low attack complexity (AC:L), requires no privileges (PR:N), and no user interaction (UI:N). The scope is unchanged (S:U) with no impact on confidentiality (C:N) or integrity (I:N), but low impact on availability (A:L) (NVD).

The vulnerability could result in minor application denial-of-service if successfully exploited. The impact is primarily focused on system availability, with no direct effect on data confidentiality or integrity (CIS Advisory).

Adobe has released security updates to address this vulnerability. Organizations are advised to apply appropriate updates provided by Adobe to vulnerable systems immediately after appropriate testing (Adobe Advisory).