GHSA-6wm4-3rjj-c8xx

Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities

En bref

Publiée: 2024-05-15 22:33 UTC
Mise à jour: 2024-05-15 22:33 UTC

Description

SUPEE-10975, Magento Commerce 1.14.4.0 and Open Source 1.9.4.0 contain multiple security enhancements that help close remote code execution (RCE), cross-site scripting (XSS), cross-site request forgery (CSRF) and other vulnerabilities.

Paquets affectés

Paquet	Versions
Packagist · magento/community-edition	introduced 1.5.0.0, fixed 1.9.4.0

Références

https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ce/2018-11-28.yaml WEB
https://github.com/magento/magento2 PACKAGE
https://web.archive.org/web/20200929120610/https://magento.com/security/patches/supee-10975 WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — GitHub Advisory Database