Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/magento/community-edition@1.14.4%2B3
purl pkg:composer/magento/community-edition@1.14.4%2B3
Tags Ghost
Next non-vulnerable version 2.4.6-p9
Latest non-vulnerable version 2.4.9-alpha3
Risk score
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
CVE-2020-3717

Path Traversal Magento is vulnerable to a path traversal. Successful exploitation could lead to sensitive information disclosure.
2.2.11
Vulnerable
2.3.4
Vulnerable
2.0.0
Vulnerable
CVE-2020-3719

SQL Injection Magento is vulnerable to SQL injection. Successful exploitation could lead to sensitive information disclosure.
2.2.11
Vulnerable
2.3.4
Vulnerable
2.0.0
Vulnerable
CVE-2020-3718

Code Execution Magento has a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
2.2.11
Vulnerable
2.3.4
Vulnerable
2.0.0
Vulnerable
CVE-2020-3716

Deserialization of Untrusted Data Magento has a deserialization vulnerability. Successful exploitation could lead to arbitrary code execution.
2.2.11
Vulnerable
2.3.4
Vulnerable
2.0.0
Vulnerable
CVE-2020-3715

Cross-site Scripting Magento has a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
2.2.11
Vulnerable
2.3.4
Vulnerable
2.0.0
Vulnerable
CVE-2020-3758

Cross-site Scripting Magento has a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
2.2.11
Vulnerable
2.3.4
Vulnerable
2.0.0
Vulnerable
This package is not known to fix any advisories.