Blocking SessionReaper and PolyShell File Access with Fastly on Magento/Adobe Commerce

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

If you’ve been keeping an eye on the Magento security space recently, you’ll have seen the research from Sansec around SessionReaper exploitation and the more recent PolyShell - both of which use the media/custom_options/ directory as a vector for uploading and executing malicious PHP files. The SessionReaper attack targets session data to extract customer and admin credentials, and the PolyShell…

Read on dor.ky ↗