Search for packages
| purl | pkg:composer/magento/community-edition@1.9.4%2B3 |
| Tags | Ghost |
| Next non-vulnerable version | 2.4.6-p9 |
| Latest non-vulnerable version | 2.4.9-alpha3 |
| Risk score |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
CVE-2020-3717
|
Path Traversal Magento is vulnerable to a path traversal. Successful exploitation could lead to sensitive information disclosure. |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-3719
|
SQL Injection Magento is vulnerable to SQL injection. Successful exploitation could lead to sensitive information disclosure. |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-3718
|
Code Execution Magento has a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution. |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-3716
|
Deserialization of Untrusted Data Magento has a deserialization vulnerability. Successful exploitation could lead to arbitrary code execution. |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-3715
|
Cross-site Scripting Magento has a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure. |
Vulnerable Vulnerable Vulnerable |
|
CVE-2020-3758
|
Cross-site Scripting Magento has a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure. |
Vulnerable Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-w8vh-5v64-j3vr
|
Withdrawn Advisory: Magento 2 Community Edition RCE Vulnerability ## Withdrawn Advisory This advisory has been withdrawn because the vulnerability does … |
CVE-2019-8229
|
|
GHSA-crv7-r357-gw3w
|
Magento 2 Community Edition RCE Vulnerability A remote code execution vulnerability exists in Magento 1 prior to 1.9.4.3 and 1.14.4.3, … |
CVE-2019-8114
|
|
GHSA-988g-wfwf-5666
|
Withdrawn Advisory: Magento 2 Community Edition XSS Vulnerability ## Withdrawn Advisory This advisory has been withdrawn because the vulnerability does … |
CVE-2019-8228
|
|
CVE-2019-8230
|
Improper Input Validation In Magento an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through … | |
|
CVE-2019-8232
|
Improper Input Validation In Magento an authenticated user with administrative privileges for the import feature can execute arbitrary code through … | |
|
CVE-2019-8152
|
Cross-site Scripting A stored cross-site scripting (XSS) vulnerability exists in in Magento. An authenticated user with access to the wysiwyg … | |
|
CVE-2019-8227
|
Cross-site Scripting In Magento an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import/export functionality when … | |
|
CVE-2019-8231
|
Improper Input Validation In Magento an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code through … |