Adobe Commerce 2.4.3 release notes

Overview

Look for the following highlights in this release.

This release includes 33 security fixes and platform security improvements. Many of these security fixes have been backported to 2.4.2-p2 and 2.3.7-p1.
No confirmed attacks related to these issues have occurred to date. However, certain vulnerabilities can potentially be exploited to access customer information or take over administrator sessions. Most of these issues require that an attacker first obtains access to the Admin. As a result, we remind you to take all necessary steps to protect your Admin, including but not limited to these efforts: IP allowlisting,two-factor authentication, use of a VPN, the use of a unique location rather than/admin, and good password hygiene. SeeAdobe Security Bulletinfor a discussion of these fixed issues.

Version 2.4.3 is not yet compatible with PHP 8.x, but the following platform upgrades bring us closer to future compatibility with PHP 8.x.