Adobe Commerce 路径遍历漏洞

该路径遍历漏洞允许攻击者在 Magento 服务器上执行未经授权的文件修改操作。攻击者可以通过构造恶意的请求，访问并修改位于 Web 根目录之外的文件，例如配置文件、系统文件或敏感数据。这可能导致信息泄露、代码执行、甚至完全控制受影响的 Magento 实例。由于该漏洞不需要用户交互，攻击者可以远程利用，造成广泛的影响。类似的安全事件表明，路径遍历漏洞可能被用于部署恶意代码或篡改网站内容。

E-commerce businesses running Magento Community Edition versions 2.4.4 through 2.4.7-p3 are at significant risk. Specifically, organizations using legacy Magento installations with outdated security practices and those relying on shared hosting environments are particularly vulnerable, as they may have limited control over server configurations and file permissions.

• php: Review web server access logs for unusual file access attempts, particularly those targeting files outside the intended web root directory. Look for requests containing path traversal sequences like ../.

grep '../' /var/log/apache2/access.log

• php: Examine Magento's file system permissions to ensure that only authorized users and processes have write access to critical files and directories.

find /var/www/magento -type d -perm -2 -print

• generic web: Monitor for unexpected file modifications within the Magento installation directory. Use file integrity monitoring tools to detect unauthorized changes. • generic web: Check response headers for any signs of unauthorized file access or disclosure.

1. 2025-02-11Disclosure

   disclosure

1. 已保留2025-01-21
2. 发布日期2025-02-11
3. 修改日期2025-03-17
4. EPSS 更新日期2026-04-02

最有效的缓解措施是立即将 Magento Community Edition 升级至 2.4.7-p4 或更高版本。如果无法立即升级，可以考虑实施临时缓解措施。例如，配置 Web 服务器以限制对敏感文件的访问，并使用 Web 应用防火墙 (WAF) 过滤掉可疑的请求。此外，定期审查 Magento 实例的配置，确保遵循安全最佳实践。升级后，请验证文件权限是否正确设置，并检查系统日志中是否存在异常活动。