{"uuid": "11e87365-f233-4801-9d7e-46daeeec80d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-24086", "type": "exploited", "source": "https://t.me/KomunitiSiber/648", "content": "Ongoing Xurum Attacks on E-commerce Sites Exploiting Critical Magento 2 Vulnerability\nhttps://thehackernews.com/2023/08/ongoing-xurum-attacks-on-e-commerce.html\n\nE-commerce sites using Adobe's Magento 2 software are the target of an ongoing campaign that has been active since at least January 2023.\nThe attacks, dubbed\u00a0Xurum\u00a0by Akamai, leverage a now-patched critical security flaw (CVE-2022-24086, CVSS score: 9.8) in Adobe Commerce and Magento Open Source that, if successfully exploited, could lead to arbitrary code execution.\n\"The attacker seems to be", "creation_timestamp": "2023-08-14T16:21:33.000000Z"}