Critical Magento zero-day flaw CVE-2022
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-24086 | Unauthenticated RCE via checkout input-validation flaw in Adobe Commerce/Magento | 9.8 | 99% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | naturalfreshmall.com | n deployed a digital skimmer that was being loaded from the naturalfreshmall(.)com domain. More than 350 ecommerce stores infected with malw |
From the original article
2 min read at securityaffairs.com
Adobe addressed a critical vulnerability ( CVE-2022-24086 ) impacting Magento Open Source products that is being actively exploited in the wild. Adobe rolled out security updates to address a critical security vulnerability, tracked as CVE-2022-24086 , affecting its Commerce and Magento Open Source products that is being actively exploited in the wild.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.