Exploit / PoCcriticalExploited in the wild

Surge in Magento 2 template attacks exploiting CVE-2022

Security Affairsby @securityaffairsSep 23, 2022 · 13:55 UTC (Sep 23, 2022)2 min read2 · 2 reads

Read at securityaffairs.com

Analyze CVE-2022-24086 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-24086

Tags: cve-2022-24086 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-24086	Unauthenticated RCE via checkout input-validation flaw in Adobe Commerce/Magento	9.8	99%	KEV	Feb 16, 2022 KEV Feb 15, 2022

From the original article

2 min read at securityaffairs.com

Sansec researchers warn of a surge in hacking attempts targeting a critical Magento 2 vulnerability tracked as CVE-2022-24086. Sansec researchers are warning of a hacking campaign targeting the CVE-2022-24086 Magento 2 vulnerability. Magento is a popular open-source e-commerce platform owned by Adobe, which is used by hundreds of thousands of e-stores worldwide.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.