Magento 2.3 : Update critical vulnerability website from host request

Please find below the mail sent by my host provider. You are using Magento Open Source hosted on this server [login to view URL] which according to a government organization is affected by a critical vulnerability. They allow an unauthenticated attacker to execute arbitrary code remotely on the vulnerable server. The publisher indicates that the identified vulnerability CVE-2022-24086 is exploited in the context of targeted attacks. References : Some listed Magento services expose their version number. The action of hiding this information will not stop the identification of the product, it will however provide a first level of security in order to avoid a compromise by means of automated exploitation tools. - Multiple vulnerabilities in Adobe Commerce – CERT-FR ([login to view URL])<[login to view URL]> - News bulletin CERTFR-2022-ACT-007 – CERT-FR ([login to view URL])<[login to view URL]> - [login to view URL] - [login to view URL] We invite you to apply the corrective measures quickly in order to resolve the problem. Thanking you in advance. Kind regards, Scaleway Abuse Team