Kunyanya kusasimba muMagento e-commerce chikuva

Adobe Company yakaburitswa kuvandudza chikuva chakavhurika chekuronga e-commerce Magento (2.3.4, 2.3.3-p1 uye 2.2.11), izvo zvinotora 10% musika wemasisitimu ekugadzira zvitoro zvepamhepo (Adobe yakave muridzi weMagento muna 2018). Iyo yekuvandudza inobvisa 6 kusagadzikana, ayo matatu akapihwa nhanho yakakosha yengozi (ruzivo hachisati chaziviswa):

  • CVE-2020-3716 - mukana weanorwisa kodhi kuuraya kana uchirasa data rekunze;
  • CVE-2020-3718 - bypass yenzira dzekuchengetedza inotungamira mukuitwa kwekupokana kodhi padivi reserver;
  • CVE-2020-3719 ndeye SQL yekuraira inotsiva chimiro chinobvumira kuwana data mudhatabhesi.

Source: opennet.ru

Voeg