Shop check

This quick test shows whether a store runs on Magento 2 and whether known security vulnerabilities may be relevant to it. It loads the site the way a normal browser does. It does not attack the store and changes nothing. For background, see for example the article on CosmicSting (CVE-2024-34102).

Store address

What should be checked? CosmicSting (CVE-2024-34102)
Critical vulnerability in Magento 2. Patches have been available since 11 June 2024. Publicly accessible files
Checks whether confidential files such as the configuration (app/etc/env.php) or a .git directory can be downloaded from the internet.

I am allowed to have this website checked, because it is my own store or the operator has agreed.

The test only reads publicly available pages and sends no attacks. By submitting, you confirm that you are allowed to have the website checked. The number of checks is limited, and the checked address is logged.