MCLOUD-13240 : Patch for CVE-2025-24434 - Improve-web-api-async

Deepak Tiwari · Deepak Tiwari · commit 6f4de3104fbe · 2025-01-28T14:47:52.000+05:30
diff --git a/patches.json b/patches.json
@@ -297,7 +297,7 @@
       ">=2.4.4 <2.4.4-p12": "MCLOUD-13240__Patch_for_CVE_2025_24434_improve_web_api_async__2.4.4.patch",
       ">=2.4.5 <2.4.5-p11": "MCLOUD-13240__Patch_for_CVE_2025_24434_improve_web_api_async__2.4.5.patch",
       ">=2.4.6 <2.4.6-p9": "MCLOUD-13240__Patch_for_CVE_2025_24434_improve_web_api_async__2.4.6.patch",
-      ">=2.4.7 <2.4.7-p5": "MCLOUD-13240__Patch_for_CVE_2025_24434_improve_web_api_async__2.4.7.patch"
+      ">=2.4.7 <2.4.7-p4": "MCLOUD-13240__Patch_for_CVE_2025_24434_improve_web_api_async__2.4.7.patch"
     }
   },
   "magento/module-paypal": {

Original file line number	Diff line number	Diff line change
`@@ -297,7 +297,7 @@`
`297`	`297`	`">=2.4.4 <2.4.4-p12": "MCLOUD-13240__Patch_for_CVE_2025_24434_improve_web_api_async__2.4.4.patch",`
`298`	`298`	`">=2.4.5 <2.4.5-p11": "MCLOUD-13240__Patch_for_CVE_2025_24434_improve_web_api_async__2.4.5.patch",`
`299`	`299`	`">=2.4.6 <2.4.6-p9": "MCLOUD-13240__Patch_for_CVE_2025_24434_improve_web_api_async__2.4.6.patch",`
`300`		`- ">=2.4.7 <2.4.7-p5": "MCLOUD-13240__Patch_for_CVE_2025_24434_improve_web_api_async__2.4.7.patch"`
	`300`	`+ ">=2.4.7 <2.4.7-p4": "MCLOUD-13240__Patch_for_CVE_2025_24434_improve_web_api_async__2.4.7.patch"`
`301`	`301`	`}`
`302`	`302`	`},`
`303`	`303`	`"magento/module-paypal": {`