PT-2024-40098 · Adobe · Magento Commerce+1

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: Magento Commerce and Open Source versions prior to 2.2.5 Magento Commerce and Open Source versions prior to 2.1.14

Description: The issue concerns remote code execution (RCE), Cross-Site Scripting (XSS), and other security problems.

Recommendations: For versions prior to 2.2.5, update to version 2.2.5 or later to address the security issues. For versions prior to 2.1.14, update to version 2.1.14 or later to address the security issues.

Related Identifiers

GHSA-5GMH-85X8-5CX7

Affected Products

Magento Commerce

Magento Open Source

References · 4

• https://osv.dev/vulnerability/GHSA-5gmh-85x8-5cx7 · Vendor Advisory
• https://github.com/magento/magento2 · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/2018-06-27.yaml · Note
• https://web.archive.org/web/20210802091126/https://magento.com/security/patches/magento-2.2.5-and-2.1.14-security-update · Note