Sale of a 0/1-day exploit for the Magento 2 e-commerce platform (Adobe Commerce)

For informational purposes only

Vulnerability type: Unrestricted File Upload Affected versions: up to 2.4.9-alpha2 Price: $30,000

Magento 2 is an e-commerce platform for building and managing online stores. It underpins both Magento Open Source and the commercial Adobe Commerce offering and is widely used by organizations ranging from mid-sized businesses to major retailers for product catalogs, order management, payments, and customer accounts. According to publicly available information, Magento 2 is used by HP, Jaguar Land Rover, Purina, and others, while the total number of websites running on the platform is estimated at around 100,000.

💬 Discuss