CVE-2023-38209

Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Incorrect Authorization vulnerability that could lead to a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access other user's data. Exploitation of this issue does not require user interaction.

• CWE-863

• https://helpx.adobe.com/security/products/magento/apsb23-42.htmlVendor Advisory
• https://helpx.adobe.com/security/products/magento/apsb23-42.htmlVendor Advisory

Published

Aug 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-38203Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and…9.8
• CVE-2023-38204Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and…9.8
• CVE-2023-38205Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and…7.5
• CVE-2023-38206Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and…5.3
• CVE-2023-38207Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (an…7.5
• CVE-2023-38208Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (an…7.2
• CVE-2023-3821Cross-site Scripting (XSS) - Stored in GitHub repository pim…5.4
• CVE-2023-38210Adobe XMP Toolkit versions 2022.06 is affected by a Uncontro…5.5
• CVE-2023-38211Adobe Dimension version 3.4.9 is affected by a Use After Fre…7.8
• CVE-2023-38212Adobe Dimension version 3.4.9 is affected by a Heap-based Bu…7.8
• CVE-2023-38213Adobe Dimension version 3.4.9 is affected by an out-of-bound…5.5
• CVE-2023-38214Adobe Experience Manager versions 6.5.17 and earlier are aff…5.4