Adobe have released a security advisory on the 11th of October 2023 in line with their regular monthly patch schedule which includes a number of updates to address one (1) Medium Risk and two (2) Low Risk product vulnerabilities.
These updates address vulnerabilities which may impact services through Remote Code Execution, Denial of Service, Cross-Site Scripting, Information Disclosure, Elevation of Privilege and Security Restriction Bypass.
For more information please see: Adobe Security Update
This release consists of security updates for the following products:
- Adobe Bridge 12.0.4 and earlier versions
- Adobe Bridge 13.0.3 and earlier versions
- Adobe Commerce 2.4.7-beta1 and earlier versions
- Adobe Commerce 2.4.6-p2 and earlier versions
- Adobe Commerce 2.4.5-p4 and earlier versions
- Adobe Commerce 2.4.4-p5 and earlier versions
- Adobe Commerce 2.4.3-ext-4 and earlier versions
- Adobe Commerce 2.4.2-ext-4 and earlier versions
- Adobe Commerce 2.4.1-ext-4 and earlier versions
- Adobe Commerce 2.4.0-ext-4 and earlier versions
- Adobe Commerce 2.3.7-p4-ext-4 and earlier versions
- Magento Open Source 2.4.7-beta1 and earlier versions
- Magento Open Source 2.4.6-p2 and earlier versions
- Magento Open Source 2.4.5-p4 and earlier versions
- Magento Open Source 2.4.4-p5 and earlier versions
- Adobe Photoshop 2022 23.5.5 and earlier versions
- Adobe Photoshop 2023 24.7 and earlier versions
Matsco recommends any affected systems are updated as soon as convenient.