GHSA-6wm4-3rjj-c8xx

GHSA-6wm4-3rjj-c8xx · Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities

This page contains facts from public vulnerability sources. Check the original advisory before updating.

SUPEE-10975, Magento Commerce 1.14.4.0 and Open Source 1.9.4.0 contain multiple security enhancements that help close remote code execution (RCE), cross-site scripting (XSS), cross-site request forgery (CSRF) and other vulnerabilities.

Fix available

Published: 2024-05-15T22:33:24Z
Updated: 2024-05-15T22:33:25Z

Stack: php

Affected products and versions

magento/community-edition Packagist
Affected ranges
- ECOSYSTEM: ≥ 1.5.0.0, < 1.9.4.0
Update to 1.9.4.0

Original sources

https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ce/2018-11-28.yaml
https://github.com/magento/magento2
https://web.archive.org/web/20200929120610/https://magento.com/security/patches/supee-10975
https://osv.dev/vulnerability/GHSA-6wm4-3rjj-c8xx

Check your server →

GHSA-6wm4-3rjj-c8xx · Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities

Affected products and versions

magento/community-edition Packagist

Original sources