Mahimman rauni a cikin dandalin e-commerce na Magento

Kamfanin Adobe saki sabunta buɗaɗɗen dandamali don tsara kasuwancin e-commerce Magento (2.3.4, 2.3.3-p1 da 2.2.11), wanda ke daukan game da 10% kasuwar tsarin don ƙirƙirar shagunan kan layi (Adobe ya zama mamallakin Magento a cikin 2018). Sabuntawar ta kawar da lahani guda 6, wanda uku an sanya su cikin matsanancin haɗari (har yanzu ba a sanar da cikakkun bayanai ba):

• CVE-2020-3716 - yuwuwar aiwatar da lambar mai kai hari yayin lalata bayanan waje;
• CVE-2020-3718 - ketare hanyoyin tsaro da ke haifar da aiwatar da lambar sabani a gefen uwar garken;
• CVE-2020-3719 fasalin sauya umarnin SQL ne wanda ke ba da damar shiga bayanai a cikin bayanan.

source: budenet.ru