CVE-2026-48000
Gravedad CVSS v3.1:
MEDIA
Tipo:
CWE-601
Redireccionamiento de URL a sitio no confiable (Open Redirect)
Fecha de publicación:
14/07/2026
Última modificación:
16/07/2026
Descripción
*** Pendiente de traducción *** Adobe Commerce is affected by an Improper Redirect (Open Redirect) vulnerability that could result in a Security feature bypass. An attacker could construct a malicious URL that redirects a victim to an attacker-controlled site, potentially enabling credential theft and account takeover. Exploitation of this issue requires user interaction in that a victim must click on a malicious link.
Impacto
Puntuación base 3.x
4.30
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p17:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p18:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:* | ||
| cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página