The vulnerability was fixed in version 2.0.12/2.1.4 but an use case was discovered that could be used to skip the implemented protection. The issue was not directly exploitable in Magento 2.

Part of patch MAGENTO 2.0.14 AND 2.1.7 SECURITY UPDATE

This vulnerability affects the following application versions:

  • Magento 2.0.12
  • Magento 2.0.13
  • Magento 2.1.4
  • Magento 2.1.5

Skriv et svar

Din e-mailadresse vil ikke blive publiceret. Krævede felter er markeret med *