Search results

Use of --lock-env on bin/magento config:set twofactorauth/general/force_providers results in bin/magento errors

Area: Security

Component: Security

Issue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmed

Priority: P2A defect with this priority could have functionality issues which are not to expectations.A defect with this priority could have functionality issues which are not to expectations.

Reported on 2.4.8Indicates original Magento version for the Issue report.Indicates original Magento version for the Issue report.

Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branch

Status: Open.

#39836 In magento/magento2;

· MylesForrest opened on Apr 17, 2025

[Issue] Increase minimum password length for admin user

Area: Security

Component: Security

feature request

Issue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmed

Priority: P2A defect with this priority could have functionality issues which are not to expectations.A defect with this priority could have functionality issues which are not to expectations.

Progress: PR in progress

Reported on 2.4.xIndicates original Magento version for the Issue report.Indicates original Magento version for the Issue report.

Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branch

Status: Open.

#39327 In magento/magento2;

· m2-assistant opened on Nov 5, 2024

Incorrect JavaScript File Loading Order After Enabling CSP module

Area: Security

Component: Csp

Issue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmed

Priority: P2A defect with this priority could have functionality issues which are not to expectations.A defect with this priority could have functionality issues which are not to expectations.

Progress: ready for dev

Reported on 2.4.xIndicates original Magento version for the Issue report.Indicates original Magento version for the Issue report.

Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branch

Triage: Dev.ExperienceIssue related to Developer Experience and needs help with Triage to Confirm or Reject itIssue related to Developer Experience and needs help with Triage to Confirm or Reject it

Status: Open.

#39274 In magento/magento2;

· 0m3r opened on Oct 17, 2024

[Issue] Update js.phtml DOM text reinterpreted as HTML

Area: Security

Component: Backend

Issue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmed

Issue: ready for confirmation

Priority: P2A defect with this priority could have functionality issues which are not to expectations.A defect with this priority could have functionality issues which are not to expectations.

Progress: PR in progress

Reported on 2.4.xIndicates original Magento version for the Issue report.Indicates original Magento version for the Issue report.

Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branch

Triage: Dev.ExperienceIssue related to Developer Experience and needs help with Triage to Confirm or Reject itIssue related to Developer Experience and needs help with Triage to Confirm or Reject it

Status: Open.

#38821 In magento/magento2;

· m2-assistant opened on Jun 11, 2024

[Issue] Update details.js DOM text reinterpreted as HTML

Area: Security

Component: Backend

Issue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmed

Priority: P2A defect with this priority could have functionality issues which are not to expectations.A defect with this priority could have functionality issues which are not to expectations.

Progress: PR in progress

Reported on 2.4.xIndicates original Magento version for the Issue report.Indicates original Magento version for the Issue report.

Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branch

Triage: Dev.ExperienceIssue related to Developer Experience and needs help with Triage to Confirm or Reject itIssue related to Developer Experience and needs help with Triage to Confirm or Reject it

Status: Open.

#38766 In magento/magento2;

· m2-assistant opened on May 28, 2024

Changes to 2.4.6 url encoding, trigger certain WaF rules

Area: Security

Component: Url

Issue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmed

Priority: P3May be fixed according to the position in the backlog.May be fixed according to the position in the backlog.

Progress: ready for dev

Reported on 2.4.6Indicates original Magento version for the Issue report.Indicates original Magento version for the Issue report.

Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branch

Triage: Dev.ExperienceIssue related to Developer Experience and needs help with Triage to Confirm or Reject itIssue related to Developer Experience and needs help with Triage to Confirm or Reject it

Status: Open.

#38089 In magento/magento2;

· toonvd opened on Oct 16, 2023

2FA - missing "Trust this device" checkbox

Area: Security

Issue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmed

Priority: P2A defect with this priority could have functionality issues which are not to expectations.A defect with this priority could have functionality issues which are not to expectations.

Progress: dev in progress

Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branch

Severity: S1Affects critical data or functionality and forces users to employ a workaround.Affects critical data or functionality and forces users to employ a workaround.

Status: Open.

#34324 In magento/magento2;

· Green2Matter opened on Oct 12, 2021

Admin Session Clean Expired Sessions does not use config value

Area: Security

Component: Cron

Issue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmed

Priority: P3May be fixed according to the position in the backlog.May be fixed according to the position in the backlog.

Progress: ready for dev

Reported on 2.4.2Indicates original Magento version for the Issue report.Indicates original Magento version for the Issue report.

Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branch

Triage: Dev.ExperienceIssue related to Developer Experience and needs help with Triage to Confirm or Reject itIssue related to Developer Experience and needs help with Triage to Confirm or Reject it

Status: Open.

#33656 In magento/magento2;

· Quazz opened on Aug 2, 2021

Magento 2.4.4 EE update. Admin users with custom roles can't login. Get message saying "Sorry, you need permissions to view this content."

Adobe CommerceThe issue related to the Adobe Commerce(EE) or B2B functionalityThe issue related to the Adobe Commerce(EE) or B2B functionality

Area: Security

Issue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmed

Priority: P2A defect with this priority could have functionality issues which are not to expectations.A defect with this priority could have functionality issues which are not to expectations.

Progress: dev in progress

Reported on 2.4.0Indicates original Magento version for the Issue report.Indicates original Magento version for the Issue report.

Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branch

Status: Open.

#29884 In magento/magento2;

· johncollinseu opened on Sep 3, 2020

Wrong default permissions after composer install

Area: Security

Component: Composer

Issue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmed

Priority: P3May be fixed according to the position in the backlog.May be fixed according to the position in the backlog.

Reported on 2.4.xIndicates original Magento version for the Issue report.Indicates original Magento version for the Issue report.

Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchThe issue has been reproduced on latest 2.4-develop branch

Status: Open.

#13048 In magento/magento2;

· dooblem opened on Jan 8, 2018