tocsin

CVE-2023-38208

2 advisories.

Packagist/magento/community-edition CVE-2023-38208: critical 9.1, EPSS 2.55%

Magento Open Source allows Improper Neutralization of Special Elements Used

Action: Upgrade magento/community-edition to 2.4.4-p5 or later.

composer require magento/community-edition:2.4.6-p2
composer require magento/community-edition:2.4.5-p4
composer require magento/community-edition:2.4.4-p5

Affected

introducedfixedlast affected
2.4.6-p12.4.6-p2-
2.4.5-p12.4.5-p4-
2.4.4-p12.4.4-p5-

Fixed versions

2.4.6-p22.4.5-p42.4.4-p5

Sources

CVE-2023-38208 · published · modified · JSON

Packagist/magento/project-community-edition CVE-2023-38208: critical 9.1, EPSS 2.55%

Magento Open Source allows Improper Neutralization of Special Elements Used

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-2.0.2

Fixed versions

No fixed version in the source.

Sources

CVE-2023-38208 · published · modified · JSON