tocsin

Packagist/magento/community-edition CVE-2023-26367: medium 4.9, EPSS 0.80%

Magento Open Source has Improper Input Validation Vulnerability

Action: Upgrade magento/community-edition to 2.4.4-p6 or later.

composer require magento/community-edition:2.4.7-beta2
composer require magento/community-edition:2.4.6-p3
composer require magento/community-edition:2.4.5-p5
composer require magento/community-edition:2.4.4-p6

Affected

introducedfixedlast affected
2.4.7-beta12.4.7-beta2-
2.4.6-p12.4.6-p3-
2.4.5-p12.4.5-p5-
2.4.4-p12.4.4-p6-

Fixed versions

2.4.7-beta22.4.6-p32.4.5-p52.4.4-p6

Sources

CVE-2023-26367 · published · modified · JSON