Magento RCE,XSS and other vulnerabilities

2024-05-1522:34:11

GitHub Advisory Database

github.com

magento

security enhancements

rce

xss

vulnerabilities

7 High

AI Score

Confidence

High

JSON

Magento Commerce and Open Source 2.3.0, 2.2.7 and 2.1.16 contain multiple security enhancements that help close Remote Code Execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities.

Affected configurations

Vulners

Node

magentomagentoRange<2.2.7

magentomagentoRange<2.1.16

CPENameOperatorVersion
magento/community-editionlt2.2.7
magento/community-editionlt2.1.16

CPE	Name	Operator	Version
	magento/community-edition	lt	2.2.7
	magento/community-edition	lt	2.1.16

References

github.com/advisories/GHSA-8j7c-682x-r9f2

github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/2018-11-28.yaml

web.archive.org/web/20210802095950/https://magento.com/security/patches/magento-2.2.7-and-2.1.16-security-update

7 High

AI Score

Confidence

High

JSON