Executive Summary
Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce, known as StyleSmuggler, allowing them to run malicious code on online stores' servers without authentication. Attacks started on September 4, and the flaw was publicly disclosed on September 5. Security professionals should immediately prioritize patching or mitigating this vulnerability.
Technical Analysis
The vulnerability, named StyleSmuggler, allows attackers to execute malicious code on the server without authentication. The exact technical details of the vulnerability, such as its class (e.g., buffer overflow, SSRF, deserialization) and root cause (e.g., missing input validation, improper access control), are not provided in the source data.
How It Gets Exploited
An attacker can exploit this vulnerability by sending a crafted request to the vulnerable Magento Open Source or Adobe Commerce server. The specific action that triggers the vulnerability and the technical details of the exploitation are not provided in the source data. However, it is known that an unauthenticated attacker can execute malicious code on the server.
Impact Assessment
The impact of this vulnerability is significant, as it allows attackers to execute malicious code on online stores' servers without authentication. This can lead to a range of malicious activities, including data theft, malware deployment, and more. The exact CVSS score is not provided in the source data, but the severity of this vulnerability is considered high.
Recommended Actions
Security professionals should immediately prioritize patching or mitigating this vulnerability. Specifically, they should:
- Update Magento Open Source and Adobe Commerce to the latest version, if available.
- Implement Web Application Firewalls (WAFs) to detect and block suspicious traffic.
- Monitor server logs for signs of exploitation.
Sources
The Hacker News