An Israeli research firm said Wednesday that it found security flaws on Alibaba Group’s international marketplace that exposed merchants and shoppers to serious risks. The Chinese e-commerce giant said it has since fixed the problem.
The flaws on the website were discovered in AliExpress, a marketplace that helps Chinese sellers market goods to overseas customers in Russia, Brazil and the U.S., the Wall StreetJournal reports.
5 Quirky Things You Didn't Know About Alibaba's Jack Ma
Ma doesn't mind practicing Tai Chi in public. Here he and Hong Kong comedian Stephen Chow enjoy the ancient martial art at the Communication University of China in Beijing in January, 2013.Li Xueshi—ColorChina/APJack Ma really likes performing on stage, and the more outlandish the clothing, the better. Here, Ma performs at an evening party in Hangzhou, east China on September 10, 2009, to celebrate his company's 10th anniversary—while looking a little like Bjork, if she were 20 years older and a practicing Wiccan. STR/AFP/Getty ImagesHe's apparently a fan of the Terminator franchise. In 2010 he met then-California Gov. Arnold Schwarzenegger, who presented him with a leather jacket and black sunglasses during a trip to China to represent the "Terminator" outfit. If Ma knew his company would have an IPO in the U.S. four years later, he'd probably have said "I'll be back."ChinaFotoPress/Getty ImagesHolding a crystal ball-like orb is a good way to introduce a new software product, if you ask Ma. Here, he and Alibaba.com Vice President Oliver Wang touch a device to signify the launch of the ALISOFT software during a news conference in 2007 in Shanghai, China.Eugene Hoshik—APYes, Ma really does love to sing. His onstage attire was a little less flamboyant by the time this 2013 photo was taken on the 10th anniversary of China's popular Taobao online marketplace, but he is still wearing a silver jacket and what looks like a Kangol. Peter Parks—AFP/Getty Images
Israeli researchers from the security firm AppSec Labs said weaknesses in the site could have allowed attackers to take over merchant shops and change prices, alter shipment details and shut down the shop. Customers’ shipping addresses were also exposed. Credit card details, however, were not vulnerable.
