[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fHur_EA5opO2z0XFNvUsntTjmKPTNXaWt_A9E065EYSQ":3,"g5a-risk:CVE-2025-27189":169},{"success":4,"data":5,"meta":166},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":32,"epssPercentile":27,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":59,"references":60,"referencesCount":68,"weaknesses":69,"weaknessesCount":68,"isActivelyExploited":78,"cisaInfo":27,"otxData":27,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":164,"notableEvents":165},"CVE-2025-27189","What is CVE-2025-27189?","Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability that could be exploited to cause a denial-of-service condition. An attacker could trick a logged-in user into submitting a forged request to the vulnerable application, which may disrupt service availability. Exploitation of this issue requires user interaction, typically in the form of clicking a malicious link or visiting an attacker-controlled website.","Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by a Cross-Site Request Forgery (CSRF) vulnerability t...","2025-04-08T21:15:50.567","2025-04-30T14:59:09.547",4.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:N\u002FA:L",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":31,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"psirt@adobe.com","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","MEDIUM",null,2.8,1.4,[],[],0.00936,[32,32,32,32,32,32,32],"Medium",[36,41,44,47,50,53,56],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"adobe","commerce_b2b","*","cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":42,"criteria":43,"vulnerable":4},"1.3.3","cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*",{"vendor":37,"product":38,"version":45,"criteria":46,"vulnerable":4},"1.3.4","cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*",{"vendor":37,"product":38,"version":48,"criteria":49,"vulnerable":4},"1.3.5","cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*",{"vendor":37,"product":38,"version":51,"criteria":52,"vulnerable":4},"1.4.2","cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*",{"vendor":37,"product":38,"version":54,"criteria":55,"vulnerable":4},"1.5.0","cpe:2.3:a:adobe:commerce_b2b:1.5.0:*:*:*:*:*:*:*",{"vendor":37,"product":38,"version":57,"criteria":58,"vulnerable":4},"1.5.1","cpe:2.3:a:adobe:commerce_b2b:1.5.1:*:*:*:*:*:*:*",7,[61],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fhelpx.adobe.com\u002Fsecurity\u002Fproducts\u002Fmagento\u002Fapsb25-26.html","Adobe",[65,66,67],"Patch","Release Notes","Vendor Advisory",1,[70],{"id":71,"name":72,"description":73,"extendedDescription":74,"status":75,"abstraction":76,"structure":77},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2025-27189? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2025-27189, a medium severity cyber security vulnerability from 2025. Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2....","CVE-2025-27189, CVE-2025-27189 vulnerability, CVE-2025-27189 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, adobe security, commerce_b2b vulnerability","\u002Fwhat-is\u002Fcve-2025-27189",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2025-27189","Cybersecurity","CVE-2025-27189, CVE-2025-27189 vulnerability, CVE-2025-27189 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":27,"Negate":27,"Nodes":107},[108],{"Operator":109,"Negate":78,"CPEMatch":110},"OR",[111,113,115,118,121,124,126,129,132,135,137,140,143,146,148,151,154,157,160,162],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":112,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":42,"VersionEndIncluding":27},"28120C2E-10AD-4476-B6C3-BE3A43946068",{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":114,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"C4667AA3-4CC9-41C0-8E0C-19B0FCE1CF79",{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":117,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*","2ADE32D1-2845-4030-BE1F-ECE28189D0F9",{"Vulnerable":4,"Criteria":119,"MatchCriteriaID":120,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*","F2E771C9-86C4-455C-98D4-6F4FE7A9A822",{"Vulnerable":4,"Criteria":122,"MatchCriteriaID":123,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:*","491AB715-F62A-46DB-A56E-055CF7CB7BEF",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"1C90C433-6655-4038-9AB3-0304C1AFF360",{"Vulnerable":4,"Criteria":127,"MatchCriteriaID":128,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*","89BAB227-03E6-4776-ADE4-9D9CB666EFD9",{"Vulnerable":4,"Criteria":130,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:*","0E5ACABA-D6D6-4F29-A9DD-5A04A44ABE64",{"Vulnerable":4,"Criteria":133,"MatchCriteriaID":134,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*","6E94B136-7A2C-47F0-BCE4-6BB8E776A305",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":136,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"3C5C3F26-24F0-4CF5-AA2E-7CA13E9D17DB",{"Vulnerable":4,"Criteria":138,"MatchCriteriaID":139,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*","66F3EA5F-08A2-4A1E-82D3-BBE7FFA2667E",{"Vulnerable":4,"Criteria":141,"MatchCriteriaID":142,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*","7930F188-A689-4041-BF4F-FBCA579D2E49",{"Vulnerable":4,"Criteria":144,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.3.5:p9:*:*:*:*:*:*","45090787-93BF-4683-B1E2-7D12FB18BEED",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"15C638A8-EFE0-47DB-B1F9-34093AF0FC17",{"Vulnerable":4,"Criteria":149,"MatchCriteriaID":150,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*","CB863404-A9D7-4692-AB43-08945E669928",{"Vulnerable":4,"Criteria":152,"MatchCriteriaID":153,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*","D8CFA8F4-D57D-4D0F-88D5-00A72E3AD8DA",{"Vulnerable":4,"Criteria":155,"MatchCriteriaID":156,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*","A21F608C-C356-47B8-8FBB-DB28BABFC4C6",{"Vulnerable":4,"Criteria":158,"MatchCriteriaID":159,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:*","E14195F1-5016-46BE-A614-6FB4E312FC93",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":161,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E6DF9B16-DF4F-4EFC-8747-2CEEA71477DB",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":163,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E7671E11-AC9A-47CA-9FE5-C7DEEA708468",[],[],{"lastModified":11,"cacheTime":167,"version":168},1793230137168,"2.0",{"score":170,"band":171,"action":172,"scoredAt":173},22,"Low","Monitor","2026-07-01T10:35:49.286202+00:00"]