Ubungozi obubalulekile kuplathifomu ye-e-commerce ye-Magento

Inkampani ye-Adobe kukhishwe ibuyekeza inkundla evulekile yokuhlela i-e-commerce Magento (2.3.4, 2.3.3-p1 kanye no-2.2.11), okuthatha cishe 10% imakethe yezinhlelo zokudala izitolo eziku-inthanethi (u-Adobe waba umnikazi weMagento ngo-2018). Isibuyekezo sisusa ubungozi obungu-6, okuthi abathathu kubo banikezwe izinga elibucayi lengozi (imininingwane ayikamenyezelwa):

• I-CVE-2020-3716 - amathuba okusebenzisa ikhodi yomhlaseli lapho kususwa idatha yangaphandle;
• I-CVE-2020-3718 - ukudlula izindlela zokuphepha eziholela ekusetshenzisweni kwekhodi engafanele ohlangothini lweseva;
• I-CVE-2020-3719 iyisici sokushintsha umyalo we-SQL esivumela ukufinyelela kudatha kusizindalwazi.

Source: opennet.ru