Threats tagged 'ghsa-p3ch-8535-fp8j'

Adobe Commerce has a critical vulnerability involving unrestricted upload of files with dangerous types. This flaw allows an attacker to upload malicious files that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction, such as visiting a crafted URL or interacting with a compromised page. The vulnerability changes the security scope and could result in elevated access or control over victim accounts or sessions.