Magento 2.3.4 Fixes Critical Code Execution Vulnerabilities

mood · Jan 28, 2020

Magento 2.3.4 Fixes Critical Code Execution Vulnerabilities
January 28, 2020
https://www.bleepingcomputer.com/ne...ixes-critical-code-execution-vulnerabilities/

Magento today updated its e-commerce software for all supported platforms with fixes for multiple vulnerabilities. Some of them have critical severity and hackers could exploit them to run arbitrary code.

The security bugs affect Magento Commerce (2.3.3/2.2.10 and below), Open Source (2.3.3/2.2.10 and below), Enterprise Edition (1.14.4.3 and earlier), and Community Edition (1.9.4.3 and earlier). New releases are now available for each of them.
Half critical, half important
The updates address six vulnerabilities, half of them rated critical. The rest of them are marked as important.

The current Magento update addresses more than just security vulnerabilities. It also brings page builder enhancements, integration with Adobe Stock, compatibility with PWA Studio-based storefronts, along with other updates across the entire platform. A full blog post with the changes is available on the Magento website.
Click to expand...

Magento: Magento 2.3.4, 2.3.3-p1 and 2.2.11 Security Update

With the release of Magento 2.3.4, we’ve changed how we describe security issues. Individual issues are no longer described here in the Magento Security Center. Instead, these issues are documented in an Adobe Security bulletin. Please see Security updates available for Magento | APSB20-02.
Click to expand...

Log in or Sign up

Magento 2.3.4 Fixes Critical Code Execution Vulnerabilities

mood Updates Team

Log in or Sign up

Magento 2.3.4 Fixes Critical Code Execution Vulnerabilities

mood Updates Team

Useful Searches