Questions tagged [security-patch]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
130 views

Problems applying security patches in Magento 2.3

I'm currently attempting to install some security patches on a Magento 2.3.6 instance and don't seem to be able to apply them. I'm using the files from the following page: https://support.magento.com/...
user avatar
  • 370
0 votes
1 answer
459 views

Magento 2.4.3-p1: Unable to apply critical security patch

I'm trying to apply the following 2/17/2022 Critical Security patches for Magento 2.4.3-p1 from Adobe Security Bulletin APSB22-12. MDVA-43395 MDVA-43443 In accordance with Magento Documentation, I ...
user avatar
  • 467
0 votes
1 answer
107 views

patch -p1 < MDVA-43395_EE_2.4.3-p1_v1.composer.patch

I could successfully follow the instructions to install the latest security patches on our Magento store running on community version 2.4.2. I'm not sure if patches really installed well because I ...
user avatar
0 votes
1 answer
128 views

Applying Security patches on Magento 2.3

We are running Magento ver. 2.3.2-p2 Due to multiple custom modules, there are no plans to upgrade upto 2.4 for the moment but I would like to have the latest security patches applied as far as ...
user avatar
  • 3
1 vote
0 answers
33 views

Magento 2.2 - Mage-Report Exposed Magento 2 API

Magento 2.2.3 I have scan the website in Mage Report, How to solve Exposed Api issue. What magento2 patch for this instead to upgrade version.
user avatar
  • 1,288
0 votes
1 answer
105 views

PRODSECBUG-2403 RCE Vulnerability patch has not been detected! (500) get in magneto 2.4.0 security scan

i am using magneto 2.4.0 . While run magento security scan get this message FAIL | Patch | RCE Vulnerability | PRODSECBUG-2403 RCE Vulnerability patch has not been detected! (500) when try to fin ...
user avatar
1 vote
0 answers
64 views

Apply patches in Magento 1.9.4.5

I have to apply certain patches to Magento 1.9.4.5, but I can't find them anywhere. Security patch 11219 Security patch 11155 Security patch 8788
user avatar
2 votes
0 answers
30 views

What are the best method's to check/test patches on site?

I have applied changes for following patches SUPEE-10975 SUPEE-11086 SUPEE-11155 SUPEE-11219 SUPEE-11295 SUPEE-11314 For magento 1 website. Please let me know what are the best method's to check/test ...
user avatar
  • 21
0 votes
1 answer
148 views

How to fix XSS in website in url ? Magento 1

I can see that browsing url like this https://www.anywebsite.com/?p=%3Cscript%3Ealert(document.cookie)%3C/script%3E shows alert into browser window. Is their any way to prevent it ? its XSS.
user avatar
0 votes
1 answer
234 views

Apply Magento2 security Patch

We've recently tested our website on Magento's own security scan tool and we were advised to install/patch the following: API ACL - Failed.API ACL Patch not detected (APPSEC-1378) XS Vulnerability - ...
user avatar
  • 33
6 votes
3 answers
513 views

Patch is updated but still shown failed

I applied the SUPEE-11314 patch in magento 1.7.0.2 but secuity scan shows the below error. SUPEE-11314 - Failed.Weak password requirements found (MPERF-10886) can I know what is the issue. Thanks
user avatar
1 vote
0 answers
148 views

Magento 1- mage-report keeps saying the security patch isn't installed

In Magento 1.9.3.0 I have installed multiple patches (supee-11314, supee-11155, supee-11219) with the success message and also clear caches (FPC, Redis, etc), refer to screenshot 1, but mage-report ...
user avatar
  • 71
4 votes
4 answers
9k views

How to solve "Unable to apply data patch" when upgrading?

I'm upgrading my Magento 2.3.2 to Magento 2.3.5 and I'm receiving this following error during upgrade: Module ‘Magento_Wishlist’: Unable to apply data patch Magento\Wishlist\Setup\Patch\Data\...
user avatar