writeups.xyz / Magento Template Engine, A Story Of CVE-2022-24086

Submitter : c2a

Date: 16 November 2023

Bounty : undisclosed

Vulnerabilities :

• SSTI
• RCE
• Security Code Review

Programs :

• Magento

Authors :

• Antoine Gicquel (@Blueshhit)

Link :
https://www.synacktiv.com/publications/magento-template-engine-a-story-of-cve-2022-24086