Adobe Commerce / Magento Security Patching

Atwix’s top priority is keeping Adobe Commerce and Magento stores secure and up to date. From time to time, Adobe releases security patches for Magento and Adobe Commerce and we are more than happy to apply them on your store.

On the 11th of October, 2022 Adobe Security Bulletin addressed two important security issues with CVE-2022-35698 and CVE-2022-3568 patches. The detected vulnerabilities are Cross-site Scripting and Improper Access Control.

The identified and reported cross-site scripting vulnerability scored highest on the Common Vulnerability Scoring System – 10. That vulnerability leads to arbitrary code execution that, in general, compromises the store’s security. More specifically, it affects PCI compliance and tremendously decreases the trustworthiness of a store. This could translate into a significant revenue loss before the holidays season. For example, without a proper fix, there’s a possibility to inject a malicious code on the Magento / Adobe Commerce instance, which will send credit card data or other personal information to 3rd parties.

Here are your options:

Using a Magento patch

That’s the fastest option, and Atwix can install the fix for you.

Upgrade Magento to the latest 2.4.5 version

This step requires more effort in comparison with the previous one. But from the security, performance, and maintainability standpoint, it’s the best way to go.

If you need your Magento store patched or upgraded to the latest version and look for a Magento security audit, Atwix is here to help. Feel free to contact us to get a quote by using the form below.