CVE-2024-45130: 
PHP vulnerability analysis and mitigation

CVE-2024-45130 is an Improper Access Control vulnerability affecting Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier versions. The vulnerability was discovered and disclosed in October 2024, impacting Adobe Commerce and Magento Open Source platforms (NVD).

The vulnerability is classified as an Improper Access Control issue that could result in a Security feature bypass. It has been assigned a CVSS v3.1 Base Score of 4.3 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N. The vulnerability requires low privileges and no user interaction for exploitation (NVD).

If exploited, this vulnerability could allow a low-privileged attacker to bypass security measures and have a low impact on system integrity. The vulnerability specifically affects the security features of the Adobe Commerce platform (NVD).

Adobe has released security updates to address this vulnerability. Users are advised to update to the latest versions of Adobe Commerce. The affected versions that need updating include Adobe Commerce 2.4.7-p2 and earlier versions, 2.4.6-p7 and earlier versions, 2.4.5-p9 and earlier versions, and 2.4.4-p10 and earlier versions (Adobe Advisory).