Magento RCE,XSS and other vulnerabilities
Date: 2024-05
Affected: composer/magento/community-edition, composer/magento/community-edition
Attack vector: xss
Category: vulnerability-disclosure
Severity: Critical

Magento Commerce and Open Source 2.3.0, 2.2.7 and 2.1.16 contain multiple security enhancements that help close Remote Code Execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities.


Mitigations:

Architectural layers (MAESTRO):