CVE-2023-22247: XML Injection Vulnerability in Adobe Commerce leads to Arbitrary File System Read
If you're currently using Adobe Commerce version 2.4.4-p2 (or earlier) or 2.4.5-p1 (or earlier), you should be aware of a critical