PT-2024-40368 · Adobe · Magento Commerce+1

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Magento Commerce and Open Source versions prior to 2.2.6 Magento Commerce and Open Source versions prior to 2.1.15

Description The issue concerns security enhancements to address Cross-Site Scripting (XSS) and other vulnerabilities.

Recommendations For versions prior to 2.2.6, update to version 2.2.6 or later. For versions prior to 2.1.15, update to version 2.1.15 or later.

Related Identifiers

GHSA-MCFC-67VM-J568

Affected Products

Magento Commerce

Magento Open Source

References · 4

• https://osv.dev/vulnerability/GHSA-mcfc-67vm-j568 · Vendor Advisory
• https://github.com/magento/magento2 · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/2018-09-10.yaml · Note
• https://web.archive.org/web/20210802082439/https://magento.com/security/patches/magento-2.2.6-and-2.1.15-security-update · Note