Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2025-49554

Adobe Commerce | Improper Input Validation (CWE-20)

Description

Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper Input Validation vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability by providing specially crafted input, causing the application to crash or become unresponsive. Exploitation of this issue does not require user interaction.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Adobe Commerce

Default version status: affected

  • 0 to ≤ 2.4.4-p14affected

References