by eivanov89 on 7/3/24, 1:28 PM with 5 comments
by eatonphil on 7/3/24, 2:22 PM
> They analyzed “12 popular self-hosted eCommenrce applications written in four languages and deployed on over 2M websites” and identified and verified “22 critical ACIDRain attacks that allow attackers to corrupt store inventory, over-spend gift cards, and steal inventory”. According to the paper, “Of the 22 vulnerabilities, five were level-based, meaning that the default weak isolation level led to the anomalies behind the vulnerabilities.
by PreInternet01 on 7/3/24, 2:25 PM