However, we are currently running 220.127.116.11 and the same fixes from SUPEE 6482 were applied in 18.104.22.168. There is no download available for SUPEE 6482 for any version of Magento after 22.214.171.124.
Also confusing is that the specific vulnerability, called
APPSEC-1030, only affected the Enterprise Edition of Magento prior to 126.96.36.199.
The SUPEE 6482 patch for 188.8.131.52 - 184.108.40.206 modifies the following files:
I have verified that these changes are already present, so applying the old SUPEE 6482 patch would do nothing. Additionally, none of these changes appear to address the
I am reasonably sure that this vulnerability - as it originally appeared in Magento - does not exist, but I am concerned that something else is re-introducing the same issue.
How do I determine exactly why this security check is failing?