Skip to content

Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities

Critical severity GitHub Reviewed Published May 15, 2024 to the GitHub Advisory Database • Updated May 15, 2024

Package

composer magento/community-edition (Composer)

Affected versions

>= 1.5.0.0, < 1.9.4.0

Patched versions

1.9.4.0

Description

SUPEE-10975, Magento Commerce 1.14.4.0 and Open Source 1.9.4.0 contain multiple security enhancements that help close remote code execution (RCE), cross-site scripting (XSS), cross-site request forgery (CSRF) and other vulnerabilities.

References

Published to the GitHub Advisory Database May 15, 2024
Reviewed May 15, 2024
Last updated May 15, 2024

Severity

Critical

Weaknesses

No CWEs

CVE ID

No known CVE

GHSA ID

GHSA-6wm4-3rjj-c8xx

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.