CVE-2025-43990-Magento-RCE

Magento APSB25-94 — 인증되지 않은 파일 업로드를 통한 RCE 개요 REST API 게스트 카트 customoptions 파일 업로드를 통해 Magento/Adobe Commerce의 인증되지 않은 파일 업로드를 익스플로잇합니다. 공격 체인 1. GraphQL → leak product SKU 2. REST API → create guest cart 3. REST API → upload PNG polyshell via customoptions fileinfo 4. HTTP GET → access .php at...

PT-2026-97017

Name of the Vulnerable Software and Affected Versions Spree versions 5.4.0 through 5.4.3 Spree versions 5.5.0 through 5.5.3 Description An authenticated customer can associate an eligible guest cart with their own account and access the billing and shipping address data stored within that cart...

magento-polyshell

APSB25-94 — PolyShell: Magento 2 Unauthenticated File Upload RCE...

WS-2021-0130

Klaviyo Magento 2 before 3.0.0 allows reading private customer data from stores. It works by reclaiming any guest-cart as your own and reading the private data for the orders in the Magento API...

CVE-2023-29290 Adobe Commerce Guest Cart Shipping Address Overwrite IDOR

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by an Incorrect Authorization vulnerability that could result in a security feature bypass. An attacker could leverage this vulnerability to bypass a minor functionality. Exploitation of this iss...