Security patches | May 24, 2023 #12892
Pinned
NyanKiyoshi
announced in
Announcements
Replies: 1 comment
-
We've just released security fixes for Saleor 3.13.16, 3.12.25, 3.11.35, 3.10.36, 3.9.49, 3.8.40, and 3.7.68. CVE-2023-32694: non-constant time HMAC comparison in Adyen plugin. Severity: medium Saleor's Malicious users could abuse this vulnerability on Saleor deployments having the Adyen plugin enabled in order to determine the secret key and forge fake events, this could affect the database integrity such as marking an order as paid when it is not. More details at: GHSA-3rqj-9v87-2x3f |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Hi Community!
We will be releasing patch versions to Saleor fixing a security defect rated as "moderate" for the following versions: 3.7, 3.8, 3.9, 3.10, 3.11, 3.12, and 3.13.
📅 When? At 1200 UTC Wednesday, May 24, 2023.
We will provide more details in this thread once the fix is published, including the patched versions list.
Beta Was this translation helpful? Give feedback.
All reactions