Tulaga fa'aletonu i le Magento e-commerce platform

Kamupani Adobe tatalaina fa'afouina o se fa'asalalauga tatala mo le fa'atulagaina o fa'atauga fa'akomepiuta Magento (2.3.4, 2.3.3-p1 ma le 2.2.11), lea e fa'atatau 10% maketi o faiga mo le fatuina o faleoloa i luga ole laiga (Adobe na avea ma pule o Magento i le 2018). O le faʻafouga e faʻaumatia ai le 6 faʻafitauli, lea e tolu o loʻo tuʻuina atu i se tulaga mataʻutia o lamatiaga (faʻamatalaga e leʻi faʻalauiloaina):

• CVE-2020-3716 - avanoa e faʻataunuʻu ai le code code pe a faʻaumatia faʻamatalaga fafo;
• CVE-2020-3718 - le faʻaogaina o auala saogalemu e taʻitaʻia ai le faʻatinoina o tulafono faʻamaonia i luga o le itu o le server;
• CVE-2020-3719 o se SQL command substitution feature e mafai ai ona maua faʻamatalaga i totonu o faʻamaumauga.

puna: opennet.ru