RIPS Technologies Jul 2
How the combination of a HTML sanitizer bug with a Phar Deserialization lead to remote takeover of Magento <= 2.3.1 shops Read on!