Shared on Mage Dispatch · 11 Nov 2025

Shutting Down File Upload Controllers for SessionReaper is futile

Since Searchlight Cyber published a technical write up and proof-of-concept for the SessionReaper vulnerability, attackers have been mass scanning Magento / Adobe Commerce stores for vulnerable targets. The first phase of the attack involves uploading a payload containing malicious session data to the server.

Visit link → https://maxchadwick.xyz/blog/shutting-down-file-upload-controllers-for-session-reaper-is-futile

#security #vulnerability #File Upload #Session Reaper

More like this

Admin File Manager: Restricted File Browser and Editor

Adds an admin-area file browser and text editor with clickable breadcrumbs, ACL-controlled view/edit access, and a detailed activity log. Enforces strict security with path validation, a sensitive-file denylist, and allowlisted text types only—no upload, delete, or rename actions.

https://github.com/TonyMerlin/M2-AdminFileManager

1

1

#admin #security #module #file-manager

10 Aug 2026
Operational Maturity Before AI Velocity: What Your Magento Team Needs First

A priority-ordered roadmap for using AI at speed without chaos: automated deployments, ephemeral environments, E2E and unit tests, static analysis, and security tooling. Explains what “good” looks like, what breaks without each layer, and where to start.

https://www.samdjames.uk/blog/magento-ai-operational-maturity/

#ai #ci-cd #testing #security

10 Aug 2026
SAML SSO for Admin Login

Adds SAML-based single sign-on for backend users, compatible with IdPs like Auth0, OneLogin, and Amazon SSO. Install via composer and configure under Stores > Configuration > Advanced > Admin > Single Sign-on.

https://github.com/Space48/magento2-sso

7

19

#authentication #admin #security #module

28 Jul 2026

New here? This is Mage Dispatch

Mage Dispatch is a community-run archive and bi-weekly newsletter for the Magento, Adobe Commerce and Mage-OS ecosystem. Modules, articles, security advisories and tools, hand-picked by developers and shared so good work does not disappear into the void.

Browse the latest links → Explore by topic → Submit a link → About us →

Shutting Down File Upload Controllers for SessionReaper is futile

More like this

Admin File Manager: Restricted File Browser and Editor

Operational Maturity Before AI Velocity: What Your Magento Team Needs First

SAML SSO for Admin Login

New here? This is Mage Dispatch

Never miss what's new in Magento land