Questions tagged [security-patch]
The security-patch tag has no usage guidance.
28
questions
0
votes
1
answer
1k
views
Magento Enterprise 2.4.6-p4 update to 2.4.6-p5
Anyone can tell me the steps to upgrade Magento Enterprise version 2.4.6-p4 to 2.4.6-p5?
am I just only run below commands?
$ composer require "magento/magento-cloud-metapackage":"2.4.6-...
- 7,588
0
votes
2
answers
175
views
Security update available for Adobe Commerce - APSB24-40 popup for Magento 2.3.x
Recently, for all Magento projects, one popup suggests applying a security update patch.
I received the same popup for even Magento 2.3.x websites. However, I couldn't find any patch for it.
Can ...
- 740
3
votes
3
answers
1k
views
How to apply security patches in magento 2.3
My current magento version is 2.3.5-p1.
I want to apply the last version of security patch for the same version 2.3.5 . Whether it can be 2.3.5- p2 or 2.3.5-p5 , anything.
How can i apply . Please can ...
- 1,592
4
votes
1
answer
1k
views
Magento 2.4.5 upgrade error: Could not find a magento/project package matching "magento/magento-cloud-metapackage 2.4.5"
While upgrading Magento Enterprise version from 2.4.5-p4 to 2.4.5-p5, i get the following error on running composer require-commerce magento/product-enterprise-edition=2.4.5-p5 --no-update --force-...
- 1,087
0
votes
2
answers
132
views
Applying Patches
In applying patches, If the provided zip file for the patch contains enterprise and open-source patches, should you apply both? or should you just apply the one same with your repo?
- 676
0
votes
1
answer
448
views
Magento 2 Payment Method Hacked
My website's checkout was hacked this 4th time.
The hacker somehow modifies the following files:
lib/web/jquery.js
vendor/magento/framework/Interception/Interceptor.php
vendor/magento/framework/...
- 624
3
votes
2
answers
1k
views
How to install Security Update patch APSB23-35
is there any way to download the patch APSB23-35 and manually apply it ?
I have several older Magento2 installations, and update them is a time consuming task - so i was wondering if there is a "...
- 9,268
6
votes
3
answers
17k
views
How to solve "Unable to apply data patch" when upgrading?
I'm upgrading my Magento 2.3.2 to Magento 2.3.5 and I'm receiving this following error during upgrade:
Module ‘Magento_Wishlist’: Unable to apply data patch
Magento\Wishlist\Setup\Patch\Data\...
0
votes
1
answer
399
views
Running security patch isn't working
I tried multiple times running patch -p1 ACSD-47578_2.4.4_2.4.5_COMPOSER_patch.composer.patch, even after running full server build on Magento root, but it seems to be stuck as seen in the image below....
- 7,588
0
votes
1
answer
889
views
Magento 2.4.4: New Security patches now available
Upon logging into Magento admin, the following popup shows up. When the link is clicked, it is going to some informational document instead of anything that speaks about security patches to be ...
- 7,588
0
votes
2
answers
653
views
In Admin: Magento Open source security patches now available
Upon logging into Magento admin, I see the following dialog. When the link shown in it is followed, there is no mention of the security patches.
- 676
2
votes
0
answers
149
views
Magento 2.4.4 - Vulnerability url issue
We are getting vulnerability url issue in magento 2.
In all magento 2 version we are getting this type of data.
We are getting data on that pages.
http://yourdomain.com/customer/section/load/test.aspx
...
- 144
1
vote
2
answers
283
views
cant download new patch APSB22-48
how can I download the patch in url
https://helpx.adobe.com/security/products/magento/apsb22-48.html
I am using adobe commerce
bin/magento --version
Magento CLI 2.4.2-p2
Thanks in advance
- 7,588
1
vote
1
answer
616
views
Magento 2 Security Updates APSB22-38 Patch
Currently, we are using the Adobe Commerce Enterprise Version 2.4.3 P1. We are just notified about the Security Updates for APSB22-38 (CVE-2022-34253).
We didn't find any patches available for these ...
- 3,392
3
votes
2
answers
538
views
Magento 2 - Security Vulnerability CVE-2022-35698 - Where can I find patch for 2.4.2?
I read about a severe security hole in magento.
But magento does not provide a patch for 2.4.2, or I cant find it.
What should I do? How can I test if I am affected?
- 7,588
2
votes
2
answers
479
views
No APSB22-48 patches for Magento 2.3
We are still running Magento community version 2.3.4x. We are upgrading since 4 months to current version, there were many plug-ins not compatible and so on. Now we are about 2-3 weeks before we can ...
- 7,588
0
votes
1
answer
728
views
Problems applying security patches in Magento 2.3
I'm currently attempting to install some security patches on a Magento 2.3.6 instance and don't seem to be able to apply them.
I'm using the files from the following page:
https://support.magento.com/...
- 412
0
votes
1
answer
2k
views
Magento 2.4.3-p1: Unable to apply critical security patch
I'm trying to apply the following 2/17/2022 Critical Security patches for Magento 2.4.3-p1 from Adobe Security Bulletin APSB22-12.
MDVA-43395
MDVA-43443
In accordance with Magento Documentation, I ...
- 2,048
0
votes
1
answer
300
views
patch -p1 < MDVA-43395_EE_2.4.3-p1_v1.composer.patch
I could successfully follow the instructions to install the latest security patches on our Magento store running on community version 2.4.2. I'm not sure if patches really installed well because I ...
- 1,467
1
vote
0
answers
110
views
Apply patches in Magento 1.9.4.5
I have to apply certain patches to Magento 1.9.4.5, but I can't find them anywhere.
Security patch 11219
Security patch 11155
Security patch 8788
- 358
1
vote
1
answer
754
views
Apply Magento2 security Patch
We've recently tested our website on Magento's own security scan tool and we were advised to install/patch the following:
API ACL - Failed.API ACL Patch not detected (APPSEC-1378) XS
Vulnerability - ...
0
votes
1
answer
149
views
PRODSECBUG-2403 RCE Vulnerability patch has not been detected! (500) get in magneto 2.4.0 security scan
i am using magneto 2.4.0 .
While run magento security scan get this message
FAIL | Patch | RCE Vulnerability | PRODSECBUG-2403 RCE Vulnerability patch has not been detected! (500)
when try to fin ...
0
votes
1
answer
294
views
Applying Security patches on Magento 2.3
We are running Magento ver. 2.3.2-p2
Due to multiple custom modules, there are no plans to upgrade upto 2.4 for the moment but I would like to have the latest security patches applied as far as ...
- 5,230
1
vote
0
answers
119
views
Magento 2.2 - Mage-Report Exposed Magento 2 API
Magento 2.2.3
I have scan the website in Mage Report, How to solve Exposed Api issue. What magento2 patch for this instead to upgrade version.
- 1,298
2
votes
0
answers
32
views
What are the best method's to check/test patches on site?
I have applied changes for following patches
SUPEE-10975
SUPEE-11086
SUPEE-11155
SUPEE-11219
SUPEE-11295
SUPEE-11314
For magento 1 website.
Please let me know what are the best method's to check/test ...
- 21
0
votes
1
answer
260
views
How to fix XSS in website in url ? Magento 1
I can see that browsing url like this
https://www.anywebsite.com/?p=%3Cscript%3Ealert(document.cookie)%3C/script%3E
shows alert into browser window.
Is their any way to prevent it ? its XSS.
- 198k
6
votes
3
answers
529
views
Patch is updated but still shown failed
I applied the SUPEE-11314 patch in magento 1.7.0.2 but secuity scan shows the below error.
SUPEE-11314 - Failed.Weak password requirements found (MPERF-10886)
can I know what is the issue.
Thanks
- 71
1
vote
0
answers
166
views
Magento 1- mage-report keeps saying the security patch isn't installed
In Magento 1.9.3.0 I have installed multiple patches (supee-11314, supee-11155, supee-11219) with the success message and also clear caches (FPC, Redis, etc), refer to screenshot 1, but mage-report ...
- 71