CVE-2024-20716: Adobe Commerce

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to an application denial-of-service. A high-privileged attacker could leverage this vulnerability to exhaust system resources, causing the application to slow down or crash. Exploitation of this issue does not require user interaction.

Affected products

• Adobe Commerce: version 2.4.4 only; version 2.4.5 only; version 2.4.6 only

Published 2024-02-15. Last modified 2026-06-17.