文件
websafe-kb/08-threat-intel/registry/advisories/magento-open-source--2466016ebd.json

60 行
1.8 KiB
JSON

{
"canonical_id": "magento-open-source--2466016ebd",
"system_id": "magento-open-source",
"display_name": "Magento Open Source",
"category": "ecommerce",
"advisory_mode": "extension",
"title": "Competing digital skimmers sabotage each other 2018-11-20 Skimmers found to subtly sabotage each others fraud operations. Competition is grim in the online skimming business (aka \"MageCart\"). The aggressive MagentoCore skimmer was previously observed to kick contending parasites from its victim hosts. But this week, we discovered that the bat... skimming",
"summary": "",
"published_at": null,
"updated_at": null,
"severity": "unknown",
"cvss_score": null,
"exploit_status": "unknown",
"source_confidence": "ecosystem-authority",
"official_source_url": "https://sansec.io/research/warring-magecart-factions",
"secondary_source_urls": [],
"aliases": [],
"cve_ids": [],
"ghsa_ids": [],
"osv_ids": [],
"affected_versions": [],
"fixed_versions": [],
"package_name": null,
"render_markdown": false,
"case_path": null,
"secure_code_topics": [
"authz-server-side-recheck",
"file-upload-validation",
"plugin-extension-trust-policy"
],
"status": "triage",
"triage_reasons": [
"missing affected/fixed version details"
],
"verification_status": "triage-manual",
"verification_mode": "synthetic",
"last_verified_at": null,
"last_run_id": null,
"evidence_bundle": null,
"historical_status": null,
"latest_status": null,
"browser_evidence": {
"required": false,
"present": false,
"refs": []
},
"repro_profile_id": "plugin-extension-generic",
"artifact_mode": "synthetic",
"blocked_reason": null,
"metadata": {
"source_names": [
"Sansec Research"
],
"source_kinds": [
"html-links"
],
"candidate_count": 1
}
}