A filter bypass and persistent input validation web vulnerability has been discovered in the ProStore application front- and backend of the ebay-owned Magento e-commerce platform. Benjamin Kunz Mejri, researcher at Vulnerability Laboratory, uncovered the flaw that could be exploited remotely, back in May, 2014, and reported it to the company, which released the fix at the end of July. According to the advisory from Vulnerability Laboratory, the filter bypass glitch resides in the regular reg…
Comments are closed.
