CVE-2026-21295 - Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction. - 漏洞详情

漏洞编号：CVE-2026-21295

风险等级：低危

漏洞来源：CVE

CVE 编号：CVE-2026-21295

CNNVD 编号：-

厂商/产品：adobe / commerce

影响范围：cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*

CWE：CWE-601

发布/更新时间：2026-03-11 / 2026-08-28

漏洞描述

Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction.

漏洞描述

相关链接

相关漏洞