CVE-2023-38251

Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)

Published Oct 13, 2023 CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Description
Adobe Commerce versions 2.4.7-beta1 (and earlier), 2.4.6-p2 (and earlier), 2.4.5-p4 (and earlier) and 2.4.4-p5 (and earlier) are affected by a Uncontrolled Resource Consumption vulnerability that could lead in minor application denial-of-service. Exploitation of this issue does not require user interaction.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-42071 Magento Open Source allows Uncontrolled Resource Consumption
Github GHSA Github GHSA GHSA-7pfc-834q-h497 Magento Open Source allows Uncontrolled Resource Consumption
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title DOS via web server and Redis storage using POST /page_cache/block/esi `handles` and `blocks` parameter Adobe Commerce | Uncontrolled Resource Consumption (CWE-400)
Weaknesses

Sources

Status
PUBLISHED
Assigner
adobe
Published
Updated
Feb 27, 2025, 8:40 PM
Reserved
Jul 13, 2023, 4:21 PM
Status
Modified
Published
Oct 13, 2023, 7:15 AM
Modified
Jun 17, 2026, 6:09 AM