ืงืจื™ื˜ื™ืฉ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ Magento E- ื”ืึทื ื“ืœ ืคึผืœืึทื˜ืคืึธืจืžืข

ืื™ืŸ ื“ืขืจ ืึธืคึฟืŸ ืคึผืœืึทื˜ืคืึธืจืžืข ืคึฟืึทืจ ืึธืจื’ืึทื ื™ื™ื–ื™ื ื’ E- ื”ืึทื ื“ืœ Magento, ื•ื•ืึธืก ืึทืงื™ืึทืคึผื™ื™ื– ื•ื•ืขื’ืŸ 10% ืคื•ืŸ ื“ื™ ืžืึทืจืง ืคึฟืึทืจ ืกื™ืกื˜ืขืžืขืŸ ืคึฟืึทืจ ืงืจื™ื™ื™ื˜ื™ื ื’ ืึธื ืœื™ื™ืŸ ืกื˜ืึธืจื–, ืึท ืงืจื™ื˜ื™ืฉ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื™ื™ื“ืขื ืึทืคื™ื™ื“ (CVE-2022-24086), ื•ื•ืึธืก ืึทืœืึทื•ื– ืงืึธื“ ืฆื• ื–ื™ื™ืŸ ืขืงืกืึทืงื™ื•ื˜ืึทื“ ืื•ื™ืฃ ื“ื™ ืกืขืจื•ื•ืขืจ ื“ื•ืจืš ืฉื™ืงืŸ ืึท ื–ื™ื›ืขืจ ื‘ืขื˜ืŸ ืึธืŸ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืึทืกื™ื™ื ื“ ืึท ืฉื˜ืจืขื ื’ืงื™ื™ึทื˜ ืžื“ืจื’ื” ืคื•ืŸ 9.8 ืคื•ืŸ 10.

ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืคืึทืœืฉ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืคื•ืŸ ืคึผืึทืจืึทืžืขื˜ืขืจืก ื‘ืืงื•ืžืขืŸ ืคื•ืŸ ื“ืขืจ ื‘ืึทื ื™ืฆืขืจ ืื™ืŸ ื“ื™ ืกื“ืจ ืคึผืจืึทืกืขืกื™ื ื’ ื”ืึทื ื“ืœืขืจ. ื“ื™ ื“ืขื˜ืึทื™ืœืก ืคื•ืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื–ืขื ืขืŸ ื ืึธืš ื ื™ืฉื˜ ื“ื™ืกืงืœืึธื•ื–ื“; ื“ื™ ืคืึทืจืจื™ื›ื˜ืŸ ื‘ื•ื™ืœื– ืึทืจืึธืคึผ ืฆื• ืงืœืึธืจ ืื•ืชื™ื•ืช ืื™ืŸ ื“ื™ ืึธื ืคึฟืจืขื’ ืคึผืึทืจืึทืžืขื˜ืขืจืก ื ื™ืฆืŸ ื“ื™ ืจืขื’ื•ืœืขืจ ืื•ื™ืกื“ืจื•ืง "/{{.*?}}/".

ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืืจื•ื™ืก ืื™ืŸ ืจื™ืœื™ืกื™ื– 2.3.3-p1 ื“ื•ืจืš 2.3.7-p2 ืื•ืŸ 2.4.0 ื“ื•ืจืš 2.4.3-p1, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜. ื“ืขืจ ืคืึทืจืจื™ื›ื˜ืŸ ืื™ื– ื‘ืืจืขื›ื˜ื™ื’ื˜ ืื™ืŸ ื“ื™ ืคืึธืจืขื ืคื•ืŸ ืึท ืœืึทื˜ืข (ื ื™ื™ึท ืจื™ืœื™ืกื™ื– ืžื™ื˜ ื“ื™ ืคืึทืจืจื™ื›ื˜ืŸ ื–ืขื ืขืŸ ื ืึธืš ื ื™ืฉื˜ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“). Magento ื™ื•ื–ืขืจื– ื–ืขื ืขืŸ ืจืขืงืึทืžืขื ื“ื™ื“ ืฆื• ืขืจื“ื–ืฉืึทื ื˜ืœื™ ื™ื ืกื˜ืึทืœื™ืจืŸ ื“ื™ ืœืึทื˜ืข, ื•ื•ื™ื™ึทืœ ื™ื—ื™ื“ ืงืึทืกืขืก ืคื•ืŸ ื ื™ืฆืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ืงืฉื™ื ืฆื• ืงืึทื˜ืขืจ ืื ืคืืœืŸ ืื•ื™ืฃ ืึธื ืœื™ื™ืŸ ืกื˜ืึธืจื– ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ืจืขืงืึธืจื“ืขื“ ืื•ื™ืฃ ื“ืขืจ ืื™ื ื˜ืขืจื ืขืฅ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’