Vulnerabilitycritical
Adobe patches Magento CMS zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-24086 | Unauthenticated RCE via checkout input-validation flaw in Adobe Commerce/Magento | 9.8 | 99% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | naturalfreshmall.com | f malware. 370 of these stores load the malware via https://naturalfreshmall[.]com/image/pixel[.]js. — Sansec (@sansecio) January 25, 2022 |
From the original article
1 min read at therecord.media
Adobe has released an emergency security update on Sunday to address a zero-day vulnerability in the Magento and Adobe Commerce platforms that was actively abused in the wild by attackers. The zero-day, tracked as CVE-2022-24086 , was described as a pre-authentication remote code execution issue. Adobe said the root cause of the bug was improper input validation.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.