tag

Form-Key

Adobe Magento "SessionReaper" Unauthenticated File Upload / LFI (CVE-2025-54236)

CVE-2025-54236· Adobe Commerce / Magento Open Source — customer/address_file/upload endpoint (dubbed "SessionReaper") patched