{ "affected": [ { "ranges": [ { "database_specific": { "cpe": [ "cpe:2.3:a:adobe:commerce:2.3.7:-:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.3.7:p1:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.3.7:p2:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.3.7:p3:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.3.7:p4:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.0:-:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.0:ext-1:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.1:-:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.1:ext-1:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.2:-:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.2:ext-1:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.2:p1:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.2:ext-2:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.2:p2:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.3:-:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.3:*:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.3:ext-1:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.3:p1:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.3:ext-2:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.3:p2:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.3:ext-3:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*", "cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*", "cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*" ], "extracted_events": [ { "introduced": "2.3.7-NA" }, { "last_affected": "2.3.7-NA" }, { "introduced": "2.3.7-p1" }, { "last_affected": "2.3.7-p1" }, { "introduced": "2.3.7-p2" }, { "last_affected": "2.3.7-p2" }, { "introduced": "2.3.7-p3" }, { "last_affected": "2.3.7-p3" }, { "introduced": "2.3.7-p4" }, { "last_affected": "2.3.7-p4" }, { "introduced": "2.4.0" }, { "last_affected": "2.4.0" }, { "introduced": "2.4.0-NA" }, { "last_affected": "2.4.0-NA" }, { "introduced": "2.4.0-ext\\-1" }, { "last_affected": "2.4.0-ext\\-1" }, { "introduced": "2.4.1" }, { "last_affected": "2.4.1" }, { "introduced": "2.4.1-NA" }, { "last_affected": "2.4.1-NA" }, { "introduced": "2.4.1-ext\\-1" }, { "last_affected": "2.4.1-ext\\-1" }, { "introduced": "2.4.2" }, { "last_affected": "2.4.2" }, { "introduced": "2.4.2-NA" }, { "last_affected": "2.4.2-NA" }, { "introduced": "2.4.2-ext\\-1" }, { "last_affected": "2.4.2-ext\\-1" }, { "introduced": "2.4.2-p1" }, { "last_affected": "2.4.2-p1" }, { "introduced": "2.4.2-ext\\-2" }, { "last_affected": "2.4.2-ext\\-2" }, { "introduced": "2.4.2-p2" }, { "last_affected": "2.4.2-p2" }, { "introduced": "2.4.3" }, { "last_affected": "2.4.3" }, { "introduced": "2.4.3-NA" }, { "last_affected": "2.4.3-NA" }, { "introduced": "2.4.3-ext\\-1" }, { "last_affected": "2.4.3-ext\\-1" }, { "introduced": "2.4.3-p1" }, { "last_affected": "2.4.3-p1" }, { "introduced": "2.4.3-ext\\-2" }, { "last_affected": "2.4.3-ext\\-2" }, { "introduced": "2.4.3-p2" }, { "last_affected": "2.4.3-p2" }, { "introduced": "2.4.3-ext\\-3" }, { "last_affected": "2.4.3-ext\\-3" }, { "introduced": "2.4.4-NA" }, { "last_affected": "2.4.4-NA" }, { "introduced": "2.4.4-p1" }, { "last_affected": "2.4.4-p1" }, { "introduced": "2.4.4-p10" }, { "last_affected": "2.4.4-p10" }, { "introduced": "2.4.4-p2" }, { "last_affected": "2.4.4-p2" }, { "introduced": "2.4.4-p3" }, { "last_affected": "2.4.4-p3" }, { "introduced": "2.4.4-p4" }, { "last_affected": "2.4.4-p4" }, { "introduced": "2.4.4-p5" }, { "last_affected": "2.4.4-p5" }, { "introduced": "2.4.4-p6" }, { "last_affected": "2.4.4-p6" }, { "introduced": "2.4.4-p7" }, { "last_affected": "2.4.4-p7" }, { "introduced": "2.4.4-p8" }, { "last_affected": "2.4.4-p8" }, { "introduced": "2.4.4-p9" }, { "last_affected": "2.4.4-p9" }, { "introduced": "2.4.5-NA" }, { "last_affected": "2.4.5-NA" }, { "introduced": "2.4.5-p1" }, { "last_affected": "2.4.5-p1" }, { "introduced": "2.4.5-p2" }, { "last_affected": "2.4.5-p2" }, { "introduced": "2.4.5-p3" }, { "last_affected": "2.4.5-p3" }, { "introduced": "2.4.5-p4" }, { "last_affected": "2.4.5-p4" }, { "introduced": "2.4.5-p5" }, { "last_affected": "2.4.5-p5" }, { "introduced": "2.4.5-p6" }, { "last_affected": "2.4.5-p6" }, { "introduced": "2.4.5-p7" }, { "last_affected": "2.4.5-p7" }, { "introduced": "2.4.5-p8" }, { "last_affected": "2.4.5-p8" }, { "introduced": "2.4.5-p9" }, { "last_affected": "2.4.5-p9" }, { "introduced": "2.4.6-NA" }, { "last_affected": "2.4.6-NA" }, { "introduced": "2.4.6-p1" }, { "last_affected": "2.4.6-p1" }, { "introduced": "2.4.6-p2" }, { "last_affected": "2.4.6-p2" }, { "introduced": "2.4.6-p3" }, { "last_affected": "2.4.6-p3" }, { "introduced": "2.4.6-p4" }, { "last_affected": "2.4.6-p4" }, { "introduced": "2.4.6-p5" }, { "last_affected": "2.4.6-p5" }, { "introduced": "2.4.6-p6" }, { "last_affected": "2.4.6-p6" }, { "introduced": "2.4.6-p7" }, { "last_affected": "2.4.6-p7" }, { "introduced": "2.4.7-NA" }, { "last_affected": "2.4.7-NA" }, { "introduced": "2.4.7-b1" }, { "last_affected": "2.4.7-b1" }, { "introduced": "2.4.7-p1" }, { "last_affected": "2.4.7-p1" }, { "introduced": "2.4.7-b2" }, { "last_affected": "2.4.7-b2" }, { "introduced": "2.4.7-p2" }, { "last_affected": "2.4.7-p2" } ], "source": "CPE_STRING" }, "events": [ { "introduced": "44a7b6079bcac5ba92040b16f4f74024b4f34d09" }, { "last_affected": "d196d504d8b387454a123033ec2a74d7fd3d5430" } ], "repo": "https://github.com/magento/magento2", "type": "GIT" } ], "versions": [ "2.3.7-NA", "2.3.7-p1", "2.3.7-p2", "2.3.7-p3", "2.3.7-p4", "2.4.0", "2.4.0-ext\\-1", "2.4.1", "2.4.1-ext\\-1", "2.4.2", "2.4.2-ext\\-1", "2.4.2-ext\\-2", "2.4.3", "2.4.3-ext\\-1", "2.4.3-ext\\-2", "2.4.3-ext\\-3", "2.4.4-NA", "2.4.4-p1", "2.4.4-p10", "2.4.4-p2", "2.4.4-p3", "2.4.4-p4", "2.4.4-p5", "2.4.4-p6", "2.4.4-p7", "2.4.4-p8", "2.4.4-p9", "2.4.5-NA", "2.4.5-p1", "2.4.5-p2", "2.4.5-p3", "2.4.5-p4", "2.4.5-p5", "2.4.5-p6", "2.4.5-p7", "2.4.5-p8", "2.4.5-p9", "2.4.6-NA", "2.4.6-p1", "2.4.6-p2", "2.4.6-p3", "2.4.6-p4", "2.4.6-p5", "2.4.6-p6", "2.4.6-p7", "2.4.7-NA", "2.4.7-b1", "2.4.7-b2" ] } ], "database_specific": { "cna_assigner": "adobe", "cwe_ids": [ "CWE-79" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45123.json", "unresolved_ranges": [ { "extracted_events": [ { "last_affected": "2.4.4-p10" } ], "source": "AFFECTED_FIELD" } ] }, "details": "Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.", "id": "CVE-2024-45123", "modified": "2026-07-15T01:49:08.981080868Z", "published": "2024-10-10T09:58:03.098Z", "references": [ { "type": "ADVISORY", "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/45xxx/CVE-2024-45123.json" }, { "type": "ADVISORY", "url": "https://helpx.adobe.com/security/products/magento/apsb24-73.html" }, { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45123" } ], "schema_version": "1.8.0", "severity": [ { "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "type": "CVSS_V3" } ], "summary": "Adobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)" }