Posts tagged: Adobe

A file-upload flaw in Adobe Commerce and Magento lets an attacker who tricks a logged-in user into clicking a crafted link run code and hijack that user’s session, and it’s already being exploited.

An unauthenticated attacker can bypass an authorization check in Adobe Commerce and Magento to read or alter sensitive data, no login or user action needed, and it’s already being exploited.

A server-side template injection in Adobe Commerce and Magento lets an unauthenticated attacker get crafted input evaluated by the template engine, leading to full code execution on the store.