danslo

APSB23-50

https://helpx.adobe.com/security/products/magento/apsb23-50.html

Privilege Escalation

The vulnerability with the highest CVSS score of 8.8 (CVE-2023-38218) states that it is an unauthenticated privilege escalation due to improper input validation.

If we look at the diff we see a number of security related changes. One of those changes is the following in Magento\Customer\Plugin\Webapi\Controller\Rest\ValidateCustomerData::validateInputData:

leegilmorecode

...

// add the feature-dev stage with the relevant environment config to the pipeline
// this is the test stage (beta)
const featureDevStage: PipelineStage = new PipelineStage(
  this,
  'FeatureDev',
  {
    ...environments.featureDev,
  }

leegilmorecode

export interface EnvironmentConfig {
  env: {
    account: string;
    region: string;
  };
  stageName: string;
  stateful: {
    bucketName: string;
  };
  stateless: {

Rud5G

{
    "Statement": [
        {
            "Action": [
                "apigateway:*",
                "cloudformation:CancelUpdateStack",
                "cloudformation:ContinueUpdateRollback",
                "cloudformation:CreateChangeSet",
                "cloudformation:CreateStack",
                "cloudformation:CreateUploadBucket",

Rud5G

#!/bin/bash

set -eu

# see: https://gist.github.com/Rud5G/71058242650001f6a5e4eeb4003daaa3

if ! test -f "$(pwd)/bin/magento";
then
    echo "Usage $0"
    echo ""

zepgram

<?php

declare(strict_types=1);

namespace MyNamespace\Sales\Model\Order\Pdf;

use Magento\Sales\Model\Order\Pdf\AbstractPdf as MagentoAbstractPdf;

/**
 * Drastically reduce size of PDF by changing fonts

Rud5G

PROFILE=sandbox

peterjaap

<?php

// Run with the URL pointing to a require-config.js as the first argument;
// php identify.php http://magento2demo.firebearstudio.com/pub/static/frontend/Magento/luma/en_US/requirejs-config.js

$content = file_get_contents($argv[1]);
preg_match_all(
  '/(?P<quote>\'|")(?P<extension>[[:alnum:]]+_[[:alnum:]]+)\/js\/.+?(?P=quote)/m',
  $content,
  $matches

Rud5G

#!/bin/bash
#
# findleak
##########################################################################
# Script that displays an overview of the virtual memory growth per process
# for the last 14 days. Per process you can find the PID and process name,
# how many days the process has lived (max. 14 days), the total growth of
# the memory consumption during that number of days, and the growth for
# each day (in MiB).
# Processes that were only present for 1 day and processes that did not

max10rogerio

// MIT License

// Copyright (c) 2023 Max Rogério

// Permission is hereby granted, free of charge, to any person obtaining a copy
// of this software and associated documentation files (the "Software"), to deal
// in the Software without restriction, including without limitation the rights
// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
// copies of the Software, and to permit persons to whom the Software is
// furnished to do so, subject to the following conditions: