{"vulnerability": "cve-2022-3425", "sightings": [{"uuid": "b820d248-28ab-4f3c-b1a9-3df760bc6fff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-34256", "type": "seen", "source": "https://t.me/cibsecurity/48250", "content": "\u203c CVE-2022-34256 \u203c\n\nAdobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this vulnerability to access other user's data. Exploitation of this issue does not require user interaction.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-17T00:45:33.000000Z"}, {"uuid": "ef1d6fbe-7db2-44e7-bb4a-866838471e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-34251", "type": "seen", "source": "https://t.me/cibsecurity/46330", "content": "\u203c CVE-2022-34251 \u203c\n\nAdobe InCopy versions 17.2 (and earlier) and 16.4.1 (and earlier) are affected by an Out-Of-Bounds Write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-15T20:35:11.000000Z"}]}