~ / search / GHSA-vqg7-8v6x-54rq

GHSA-vqg7-8v6x-54rq

Magento security mitigation bypass vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-9692

Packages

EcosystemPackageAffectedFixed in
Packagist magento/community-edition < 2.3.5-p2 2.3.5-p2

Details

As written in the advisory (Markdown source, shown as plain text).

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

References

External links from the advisory. They lead to third-party sites.