Magento StyleSmuggler RCE: Report Poisoning to Code Execution
fortbridge.co.uk
Two unauthenticated requests: poison a Magento failure report, then drive the email template system into the DI compiler that includes it. Full chain analysis, lab PoC, and mitigations.