{"uuid": "0635260d-98b7-447f-85ed-8a86807ffaea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38250", "type": "seen", "source": "https://t.me/arpsyndicate/2423", "content": "#ExploitObserverAlert\n\nCVE-2023-38250\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-38250. Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could lead in arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of this issue does not require user interaction and attack complexity is high as it requires knowledge of tooling beyond just using the UI.\n\nFIRST-EPSS: 0.000790000\nNVD-IS: 5.9\nNVD-ES: 0.7", "creation_timestamp": "2024-01-04T03:53:23.000000Z"}