CVE-2025-43990-Magento-RCE

Magento APSB25-94 — 未授权文件上传致远程代码执行 概述 利用 Magento / Adobe Commerce 中通过 REST API 访客购物车的 customoptions 文件上传功能实现的未授权文件上传。 攻击链 root@kitploit: 1. GraphQL → 泄漏产品 SKU 2. REST API → 创建访客购物车 3. REST API → 通过 customoptions fileinfo 上传 PNG 多态 shell 4. HTTP GET → 以可预测路径访问 .php 文件 5. PHP exec → 远程代码执行 工具...

CVE-2023-29290 Adobe Commerce Guest Cart Shipping Address Overwrite IDOR

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this iss...