Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-9664

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-337c-3rch-q35j

Magento php object injection vulnerability Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution. A patch SUPEE-11346 is available at Magento Open Source Download Page https://github.com/m-a-org/magento-patches > Release Archive Tab > Magento Open Source Patches - 1.x Section

gitlab/packagist/magento/community-edition/CVE-2020-9664

Code Injection Magento has a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution.

gitlab/packagist/magento/core/CVE-2020-9664

Deserialization of Untrusted Data Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution.