Security News > 2020 > October > Adobe Patches 9 Vulnerabilities in Magento

Adobe last week patched a total of nine vulnerabilities in its Magento e-commerce platform, including two critical issues.

The vulnerabilities rated critical have been described as a "File upload allow list bypass" that can lead to arbitrary code execution, and an SQL injection flaw that can provide an attacker read or write access to the targeted store's database.

The remaining important-severity vulnerabilities can allow an attacker to modify customer lists, access restricted resources, and modify CMS pages.

A total of six researchers have been credited by Adobe for reporting these vulnerabilities.

The patches are included in versions 2.4.1 and 2.3.6 of Magento Commerce and Open Source.

News URL

http://feedproxy.google.com/~r/Securityweek/~3/Df9gdTGz72U/adobe-patches-9-vulnerabilities-magento