Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [security-patch]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
396 views

Magento Enterprise 2.4.6-p4 update to 2.4.6-p5

Anyone can tell me the steps to upgrade Magento Enterprise version 2.4.6-p4 to 2.4.6-p5? am I just only run below commands? $ composer require "magento/magento-cloud-metapackage":"2.4.6-...
Paul Fan's user avatar
  • 658
4 votes
1 answer
654 views

Magento 2.4.5 upgrade error: Could not find a magento/project package matching "magento/magento-cloud-metapackage 2.4.5"

While upgrading Magento Enterprise version from 2.4.5-p4 to 2.4.5-p5, i get the following error on running composer require-commerce magento/product-enterprise-edition=2.4.5-p5 --no-update --force-...
M2 Noob's user avatar
  • 41
0 votes
2 answers
72 views

Applying Patches

In applying patches, If the provided zip file for the patch contains enterprise and open-source patches, should you apply both? or should you just apply the one same with your repo?
Ricky Aldea's user avatar
0 votes
1 answer
289 views

Magento 2 Payment Method Hacked

My website's checkout was hacked this 4th time. The hacker somehow modifies the following files: lib/web/jquery.js vendor/magento/framework/Interception/Interceptor.php vendor/magento/framework/...
Arsalan Ul Haq's user avatar
2 votes
2 answers
972 views

How to install Security Update patch APSB23-35

is there any way to download the patch APSB23-35 and manually apply it ? I have several older Magento2 installations, and update them is a time consuming task - so i was wondering if there is a "...
Armindo Pereira's user avatar
0 votes
1 answer
277 views

Running security patch isn't working

I tried multiple times running patch -p1 ACSD-47578_2.4.4_2.4.5_COMPOSER_patch.composer.patch, even after running full server build on Magento root, but it seems to be stuck as seen in the image below....
CodeForGood's user avatar
0 votes
1 answer
773 views

Magento 2.4.4: New Security patches now available

Upon logging into Magento admin, the following popup shows up. When the link is clicked, it is going to some informational document instead of anything that speaks about security patches to be ...
CodeForGood's user avatar
0 votes
2 answers
567 views

In Admin: Magento Open source security patches now available

Upon logging into Magento admin, I see the following dialog. When the link shown in it is followed, there is no mention of the security patches.
CodeForGood's user avatar
2 votes
0 answers
138 views

Magento 2.4.4 - Vulnerability url issue

We are getting vulnerability url issue in magento 2. In all magento 2 version we are getting this type of data. We are getting data on that pages. http://yourdomain.com/customer/section/load/test.aspx ...
user3411's user avatar
  • 134
1 vote
2 answers
264 views

cant download new patch APSB22-48

how can I download the patch in url https://helpx.adobe.com/security/products/magento/apsb22-48.html I am using adobe commerce bin/magento --version Magento CLI 2.4.2-p2 Thanks in advance
lazy_coder's user avatar
3 votes
2 answers
475 views

Magento 2 - Security Vulnerability CVE-2022-35698 - Where can I find patch for 2.4.2?

I read about a severe security hole in magento. But magento does not provide a patch for 2.4.2, or I cant find it. What should I do? How can I test if I am affected?
Black's user avatar
  • 3,369
2 votes
2 answers
466 views

No APSB22-48 patches for Magento 2.3

We are still running Magento community version 2.3.4x. We are upgrading since 4 months to current version, there were many plug-ins not compatible and so on. Now we are about 2-3 weeks before we can ...
Michael Müller's user avatar
3 votes
3 answers
1k views

How to apply security patches in magento 2.3

My current magento version is 2.3.5-p1. I want to apply the last version of security patch for the same version 2.3.5 . Whether it can be 2.3.5- p2 or 2.3.5-p5 , anything. How can i apply . Please can ...
Nicola Smith's user avatar
1 vote
1 answer
584 views

Magento 2 Security Updates APSB22-38 Patch

Currently, we are using the Adobe Commerce Enterprise Version 2.4.3 P1. We are just notified about the Security Updates for APSB22-38 (CVE-2022-34253). We didn't find any patches available for these ...
LEE's user avatar
  • 11
0 votes
1 answer
661 views

Problems applying security patches in Magento 2.3

I'm currently attempting to install some security patches on a Magento 2.3.6 instance and don't seem to be able to apply them. I'm using the files from the following page: https://support.magento.com/...
CJNotts's user avatar
  • 402
0 votes
1 answer
2k views

Magento 2.4.3-p1: Unable to apply critical security patch

I'm trying to apply the following 2/17/2022 Critical Security patches for Magento 2.4.3-p1 from Adobe Security Bulletin APSB22-12. MDVA-43395 MDVA-43443 In accordance with Magento Documentation, I ...
Mike Dubs's user avatar
  • 505
0 votes
1 answer
293 views

patch -p1 < MDVA-43395_EE_2.4.3-p1_v1.composer.patch

I could successfully follow the instructions to install the latest security patches on our Magento store running on community version 2.4.2. I'm not sure if patches really installed well because I ...
CodeForGood's user avatar
0 votes
1 answer
281 views

Applying Security patches on Magento 2.3

We are running Magento ver. 2.3.2-p2 Due to multiple custom modules, there are no plans to upgrade upto 2.4 for the moment but I would like to have the latest security patches applied as far as ...
Kanra's user avatar
  • 3
1 vote
0 answers
102 views

Magento 2.2 - Mage-Report Exposed Magento 2 API

Magento 2.2.3 I have scan the website in Mage Report, How to solve Exposed Api issue. What magento2 patch for this instead to upgrade version.
Sourav's user avatar
  • 1,298
0 votes
1 answer
148 views

PRODSECBUG-2403 RCE Vulnerability patch has not been detected! (500) get in magneto 2.4.0 security scan

i am using magneto 2.4.0 . While run magento security scan get this message FAIL | Patch | RCE Vulnerability | PRODSECBUG-2403 RCE Vulnerability patch has not been detected! (500) when try to fin ...
Shubhajay Das's user avatar
1 vote
0 answers
106 views

Apply patches in Magento 1.9.4.5

I have to apply certain patches to Magento 1.9.4.5, but I can't find them anywhere. Security patch 11219 Security patch 11155 Security patch 8788
surbhi agr's user avatar
2 votes
0 answers
32 views

What are the best method's to check/test patches on site?

I have applied changes for following patches SUPEE-10975 SUPEE-11086 SUPEE-11155 SUPEE-11219 SUPEE-11295 SUPEE-11314 For magento 1 website. Please let me know what are the best method's to check/test ...
dev's user avatar
  • 21
0 votes
1 answer
257 views

How to fix XSS in website in url ? Magento 1

I can see that browsing url like this https://www.anywebsite.com/?p=%3Cscript%3Ealert(document.cookie)%3C/script%3E shows alert into browser window. Is their any way to prevent it ? its XSS.
Hamendra Sunthwal's user avatar
1 vote
1 answer
652 views

Apply Magento2 security Patch

We've recently tested our website on Magento's own security scan tool and we were advised to install/patch the following: API ACL - Failed.API ACL Patch not detected (APPSEC-1378) XS Vulnerability - ...
sierra's user avatar
  • 53
6 votes
3 answers
528 views

Patch is updated but still shown failed

I applied the SUPEE-11314 patch in magento 1.7.0.2 but secuity scan shows the below error. SUPEE-11314 - Failed.Weak password requirements found (MPERF-10886) can I know what is the issue. Thanks
venkata prasad's user avatar
1 vote
0 answers
163 views

Magento 1- mage-report keeps saying the security patch isn't installed

In Magento 1.9.3.0 I have installed multiple patches (supee-11314, supee-11155, supee-11219) with the success message and also clear caches (FPC, Redis, etc), refer to screenshot 1, but mage-report ...
Aatif's user avatar
  • 71
6 votes
4 answers
16k views

How to solve "Unable to apply data patch" when upgrading?

I'm upgrading my Magento 2.3.2 to Magento 2.3.5 and I'm receiving this following error during upgrade: Module ‘Magento_Wishlist’: Unable to apply data patch Magento\Wishlist\Setup\Patch\Data\...
Rafael Corrêa Gomes's user avatar