VulnerableCode Package Details - pkg:composer/magento/community-edition@1.14.0%2B0

Search for packages

Advisory	Summary	Fixed in package version
CVE-2020-3717	Path Traversal Magento is vulnerable to a path traversal. Successful exploitation could lead to sensitive information disclosure.	2.2.11 Vulnerable 2.3.4 Vulnerable 2.0.0 Vulnerable
CVE-2020-3719	SQL Injection Magento is vulnerable to SQL injection. Successful exploitation could lead to sensitive information disclosure.	2.2.11 Vulnerable 2.3.4 Vulnerable 2.0.0 Vulnerable
CVE-2020-3718	Code Execution Magento has a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.	2.2.11 Vulnerable 2.3.4 Vulnerable 2.0.0 Vulnerable
CVE-2020-3716	Deserialization of Untrusted Data Magento has a deserialization vulnerability. Successful exploitation could lead to arbitrary code execution.	2.2.11 Vulnerable 2.3.4 Vulnerable 2.0.0 Vulnerable
CVE-2020-3715	Cross-site Scripting Magento has a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.	2.2.11 Vulnerable 2.3.4 Vulnerable 2.0.0 Vulnerable
CVE-2019-7139	SQL Injection An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database.	2.0.0 Vulnerable 2.3.1 Vulnerable 2.1.17 Vulnerable 2.2.8 Vulnerable
CVE-2020-3758	Cross-site Scripting Magento has a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.	2.2.11 Vulnerable 2.3.4 Vulnerable 2.0.0 Vulnerable

Advisory

Summary

Fixed in package version

CVE-2020-3717

Path Traversal Magento is vulnerable to a path traversal. Successful exploitation could lead to sensitive information disclosure.

2.2.11
Vulnerable

2.3.4
Vulnerable

2.0.0
Vulnerable

CVE-2020-3719

SQL Injection Magento is vulnerable to SQL injection. Successful exploitation could lead to sensitive information disclosure.

2.2.11
Vulnerable

2.3.4
Vulnerable

2.0.0
Vulnerable

CVE-2020-3718

Code Execution Magento has a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

2.2.11
Vulnerable

2.3.4
Vulnerable

2.0.0
Vulnerable

CVE-2020-3716

Deserialization of Untrusted Data Magento has a deserialization vulnerability. Successful exploitation could lead to arbitrary code execution.

2.2.11
Vulnerable

2.3.4
Vulnerable

2.0.0
Vulnerable

CVE-2020-3715

Cross-site Scripting Magento has a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

2.2.11
Vulnerable

2.3.4
Vulnerable

2.0.0
Vulnerable

CVE-2019-7139

SQL Injection An unauthenticated user can execute SQL statements that allow arbitrary read access to the underlying database.

2.0.0
Vulnerable

2.3.1
Vulnerable

2.1.17
Vulnerable

2.2.8
Vulnerable

CVE-2020-3758

Cross-site Scripting Magento has a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

2.2.11
Vulnerable

2.3.4
Vulnerable

2.0.0
Vulnerable

purl	pkg:composer/magento/community-edition@1.14.0%2B0
Tags	Ghost

Next non-vulnerable version	2.4.6-p9
Latest non-vulnerable version	2.4.9-alpha3
Risk score