{"action":"Upgrade magento/community-edition to 2.3.7-p4 or later.","affected":[{"fixed":"2.3.7-p4","introduced":"0"},{"fixed":"2.4.3-p3","introduced":"2.4.0"},{"fixed":"2.4.5","introduced":"2.4.4"}],"component":"magento/community-edition","cve_ids":["CVE-2022-42344"],"ecosystem":"Packagist","epss":0.01348,"exploited":false,"fixed_versions":["2.3.7-p4","2.4.3-p3","2.4.5"],"ghsa_id":"GHSA-297f-r9w7-w492","id":"tcs_01M5KERRHZ46VHERXN18ZCYX4A","modified_at":"2026-09-10T03:49:46.041504790Z","published_at":"2022-10-20T19:00:29Z","references":["https://osv.dev/vulnerability/GHSA-297f-r9w7-w492","https://nvd.nist.gov/vuln/detail/CVE-2022-42344","https://github.com/magento/magento2","https://helpx.adobe.com/security/products/magento/apsb22-38.html"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-297f-r9w7-w492","url":"https://osv.dev/vulnerability/GHSA-297f-r9w7-w492"}],"summary":"Magento Improper input validation vulnerability"}