Critical vulnerability identified for Magento 2 - APSB22-12 / PRODSECBUG-3118 / CVE-2022-24086

A workaround has been added by us for customers who are unable to patch on short notice. More details can be found on our support documentation here: https://support.hypernode.com/en/best-practices/security/how-to-install-magento-patch-mdva-49935-for-critical-vulnerabilty-apsb22-12-cve-2022-24086.

Please note that this workaround will have negative side effects and should only be used as a temporary solution until you are permanently able to resolve this by installing the patch released by Adobe.

We have become aware of a critical vulnerability in Magento 2 running 2.3 or 2.4, we advise customers who use Magento 2 on their webshop to install the following patch as soon as possible. https://helpx.adobe.com/security/products/magento/apsb22-12.html

More details can be found here: https://sansec.io/research/magento-2-cve-2022-24086

At the moment we are looking into ways we can proactively help secure our customers, we will update this notification should there be any developments in this.