A critical vulnerability (CVE-2022-24086) has been identified in the open-source e-commerce platform Magento, which holds about 10% of the market for online store creation systems, allowing for code execution on the server through the submission of a specific request without authentication. The vulnerability is rated 9.8 out of 10 in severity.
The issue is caused by improper validation of user-provided parameters in the checkout handler. Details of the vulnerability's exploitation are not disclosed at this time, and the fix involves sanitizing characters in the request parameters using the regular expression ‘/{{.*?}}/’.
The vulnerability affects releases from 2.3.3-p1 to 2.3.7-p2 and from 2.4.0 to 2.4.3-p1, inclusive. The fix is available in the form of a patch (new releases with the fix have not yet been prepared). Magento users are strongly advised to urgently apply the patch, as there have already been specific cases of this vulnerability being exploited to attack online stores.
Source: opennet.ru
