Update Feed

Magento 2.4.5-p2

20 March 2023

Magento version 2.4.5-p2 is now available (security release).

Upgrading to Magento 2.4.5-p2

Magento 2.4.5-p2 can be updated to (or installed) using any of Installatron's products. Use Installatron's optional Automatic Update feature to automatically apply Magento updates as new versions are released, or use Installatron's Clone feature to duplicate an existing Magento install to test the 2.4.5-p2 upgrade prior to moving it live with Installatron's Sync funtionality. Get started managing Magento with Installatron

What's New in Magento 2.4.5-p2

This security patch includes three security bug fixes.

Security

CVE-2023-22247 ML Injection (aka Blind XPath Injection) (CWE-91) - Arbitrary file system read
CVE-2023-22250 Cross-site Scripting (Stored XSS) (CWE-79) - Arbitrary code execution
CVE-2023-22249 Improper Access Control (CWE-284) - Security feature bypass
CVE-2023-22251 Improper Authorization (CWE-285) - Security feature bypass