Magento flaw exploited to deploy persistent backdoor hidden in XML

Threat actors are exploiting critical Magento vulnerability CVE-2024-20720 to install a persistent backdoor on e-stores. Sansec researchers observed threat actors are exploiting the recently disclosed Magento vulnerability CVE-2024-20720 to deploy a persistent backdoor on e-stores. The vulnerability CVE-2024-20720 (CVSS score of 9.1) is an OS Command (‘OS Command Injection’) vulnerability that could lead to arbitrary code […]

backdoor breaking news command command injection critical cve cve-2024 cvss cvss score cyber crime cybercrime deploy exploited exploiting flaw hacking hidden information security news injection install it information security magento magento vulnerability malware os command persistent pierluigi paganini researchers sansec score stores threat threat actors vulnerability xml