How We Audited a High-Traffic Magento 2 Enterprise Stack on Linode and Mitigated XML External Entity (XXE) injection in old SOAP integrations
Initial Stack Assessment and Threat Landscape Our engagement began with a deep dive into a high-traffic Magento 2 Enterprise Edition (now Adobe Commerce) stack hosted on Linode. The primary concern was a recent security audit report flagging potential XML External Entity (XXE) injection vulnerabilities, particularly within legacy SOAP integrations. This stack served a global e-commerce […]