Tag
#Adobe Commerce
Understanding and Defending Against the StyleSmuggler Magento Zero-Day Vulnerability
A new zero-day vulnerability, dubbed StyleSmuggler, has been discovered in Magento and Adobe Commerce, allowing unauthenticated attackers to execute code on vulnerable online stores. This vulnerability is under active attack, posing a significant threat to e-commerce platforms. The attack enables the installation of backdoors on stores that may already be patched, highlighting the need for immediate mitigation and defense strategies.
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce, known as StyleSmuggler, allowing them to run malicious code on online stores' servers without authentication. Attacks started on September 4, and the flaw was publicly disclosed on September 5. Security professionals should immediately prioritize patching or mitigating this vulnerability.