A Magento open-source e-commerce platform, which holds about 10% of the market for online store systems, has revealed a critical vulnerability (CVE-2022-24086) that allows code execution on the server by sending a specific request without authentication. The vulnerability has been assigned a severity level of 9.8 out of 10.
The issue is caused by improper validation of parameters received from the user in the checkout handler. Details on exploiting the vulnerability have not yet been disclosed; the fix involves sanitizing characters in the request parameters using the regular expression "\/{{.*?}}\/".
The vulnerability is present in releases from 2.3.3-p1 to 2.3.7-p2 and from 2.4.0 to 2.4.3-p1 inclusive. A patch is available, but new releases with the fix have not yet been created. Magento users are urgently recommended to install the patch, as isolated cases of the vulnerability being exploited for attacks on online stores have already been recorded online.
Forrás: opennet.ru
