If an attacker could trick a user into installing a malicious language package or had access to an installed language package, he/she could remotely deploy an attack when the language-package code was executed.

Part of patch MAGENTO 2.0.4 SECURITY UPDATE

This vulnerability affects the following application versions:

  • Magento 2.0.0
  • Magento 2.0.0-rc
  • Magento 2.0.0-rc2
  • Magento 2.0.1
  • Magento 2.0.2
  • Magento 2.0.3

Skriv et svar

Din e-mailadresse vil ikke blive publiceret. Krævede felter er markeret med *