Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-9579

Progress 0 / 0

Advisory Summaries

gitlab/packagist/magento/community-edition/CVE-2020-9579

Code Injection Magento has a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

gitlab/packagist/magento/core/CVE-2020-9579

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.