magento/magento2 · Security
Magento remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities
- GHSA ID
- GHSA-5gmh-85x8-5cx7
- Severity
- critical
- Published
- Updated
Description
Magento Commerce and Open Source 2.2.5 and 2.1.14 contain multiple security enhancements that help close authenticated Admin user remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities.