Description

Magento 2.3 reached its end-of-life on September 8, 2022. If you are running Magento 2.3 or earlier versions, it's strongly recommend to migrate to the latest Magento version

Remediation

It's recommended to migrate to the latest Magento version.

References

Released versions

Related Vulnerabilities

WebLogic Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-23305)

Oracle JRE CVE-2012-5070 Vulnerability (CVE-2012-5070)

WordPress Plugin Insert or Embed Articulate Content into WordPress Arbitrary File Upload (4.3000000023)

PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-8935)

WordPress Plugin WP Inventory Manager Cross-Site Scripting (1.7.8)

Severity

Info

Classification

CWE-1104 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:N CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update