E-commerce site data compromised via critical Magento flaw

Attacks leveraging an already fixed critical Magento vulnerability, tracked as CVE-2024-20720, have been launched against e-commerce websites to facilitate the distribution of a Stripe payment skimmer for financial data exfiltration, according to The Hacker News.

attacks commerce compromised critical cve cve-2024 data data exfiltration data security distribution e-commerce exfiltration financial financial data flaw hacker magento magento vulnerability payment skimmer stripe the hacker news vulnerability vulnerability management websites