Skip to content

New Release 19.4.10 and 20.0.6

Placeholder for the change 1 2

  • CVE-2020-15244 3 CMS Editor code execution
  • CVE-2020-26285 4 Widget instances allows a hacker to inject an executable file on the server
  • CVE-2020-26252 5 Layout XML RCE Vulnerability

  1. https://github.com/OpenMage/magento-lts/releases/tag/v19.4.10 ↩

  2. https://github.com/OpenMage/magento-lts/releases/tag/v20.0.6 ↩

  3. https://github.com/OpenMage/magento-lts/security/advisories/GHSA-jrgf-vfw2-hj26 ↩

  4. https://github.com/OpenMage/magento-lts/security/advisories/GHSA-hj6w-xrv3-wjj9 ↩

  5. https://github.com/OpenMage/magento-lts/security/advisories/GHSA-99m6-r53j-4hh2 ↩