Adobe、CISA針對Commerce及Magento重大漏洞提出警告，並指出已被用於攻擊行動
支付動態 · 2024-07-22
針對上個月修補的電子商務平臺Adobe Commerce及Magento Open Source重大漏洞CVE-2024-34102，一個月後傳出有人將其用於攻擊行動的情況，使得該公司呼籲用戶要儘速採取相關緩解措施因應
今年6月Adobe修補電子商務平臺Commerce及Magento Open Source的重大漏洞CVE-2024-34102，如今傳出這項漏洞已被用於攻擊行動的現象。
該漏洞發生的原因，在於XML外部實體參照的限制不當，而有可能導致任意程式碼執行。攻擊者可發送參照外部實體的XML檔案，從而觸發漏洞，過程中完全無須使用者互動，CVSS風險評分達到9.8。
上週三（7月18日）Adobe再度發布修補程式，並指出他們得知CVE-2024-34102已被用於攻擊行動的情況。對此，該公司呼籲IT人員，無論是否套用6月份推出的修補程式，都應該儘速套用他們這次發布的更新軟體，並且輪替加密金鑰。
值得留意的是，美國網路安全暨基礎設施安全局（CISA）也將CVE-2024-34102列入已被用於攻擊行動的漏洞（KEV）名冊，要求聯邦機構必須在8月7日前完成修補。
Popular articles
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
PropellerAds Shared a New iGaming Case Study: 97,674 Installs and 12,701 Deposits in 3 Months
Marketing
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Kazakhstan plans to penalise online casino promotions
Regulation
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
Gaming & Technology Expo Makes a Powerful Entrance in CDMX
Marketing
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
