PT-2024-4170 · Adobe · Commerce

Jakaba01 · Published 2024-06-11 · Updated 2026-03-26 · CVE-2024-34102

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Commerce versions 2.4.4-p8 and earlier Adobe Commerce versions 2.4.5-p7 and earlier Adobe Commerce versions 2.4.6-p5 and earlier Adobe Commerce versions 2.4.7 and earlier

Description Adobe Commerce and Magento Open Source are affected by an Improper Restriction of XML External Entity Reference ('XXE') issue. This flaw could allow a remote attacker to execute arbitrary code by sending a specially crafted XML document referencing external entities. The vulnerability is actively exploited, with reports indicating over 4,000 stores compromised and ongoing attacks. Multiple threat actors are leveraging this vulnerability to inject malicious scripts. The vulnerability, dubbed "CosmicSting", allows attackers to steal sensitive data, including cryptographic keys, potentially leading to further compromise. The /rest/V1/guest-carts/1/estimate-shipping-methods API Endpoint is a potential target, with the data variable within the sourceData section being susceptible to manipulation. Exploitation does not require user interaction.

Recommendations Adobe Commerce versions prior to 2.4.7 should be updated. Adobe Commerce versions prior to 2.4.6-p5 should be updated. Adobe Commerce versions prior to 2.4.5-p7 should be updated. Adobe Commerce versions prior to 2.4.4-p8 should be updated.

Exploit

Fix

RCE

XXE

Weakness Enumeration

CWE-611

Related Identifiers

BDU:2024-04655

BIT-MAGENTO-2024-34102

CVE-2024-34102

GHSA-M8CJ-3V68-3CXJ

Affected Products

Commerce

References · 146

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/magento_xxe_to_glibc_buf_overflow.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/magento_xxe_cve_2024_34102.rb · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2024-34102.yaml · Exploit
• 🔥 https://github.com/Chocapikk/CVE-2024-34102 · Exploit
• 🔥 https://github.com/bigb0x/CVE-2024-34102 · Exploit
• 🔥 https://github.com/th3gokul/CVE-2024-34102 · Exploit
• 🔥 https://github.com/jakabakos/CVE-2024-34102-CosmicSting-XXE-in-Adobe-Commerce-and-Magento · Exploit
• 🔥 https://github.com/bughuntar/CVE-2024-34102 · Exploit
• 🔥 https://github.com/EQSTLab/CVE-2024-34102 · Exploit
• 🔥 https://vicarius.io/vsociety/posts/cosmicsting-critical-unauthenticated-xxe-vulnerability-in-adobe-commerce-and-magento-cve-2024-34102 · Exploit
• https://osv.dev/vulnerability/BIT-magento-2024-34102 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-m8cj-3v68-3cxj · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34102 · Security Note
• https://bdu.fstec.ru/vul/2024-04655 · Security Note
• https://osv.dev/vulnerability/CVE-2024-34102 · Vendor Advisory