Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/magento/community-edition@1.9.4%2B4
purl pkg:composer/magento/community-edition@1.9.4%2B4
Tags Ghost
Next non-vulnerable version 2.4.6-p9
Latest non-vulnerable version 2.4.9-alpha3
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
CVE-2020-9591

Information Exposure Magento has a defense-in-depth security mitigation vulnerability. Successful exploitation could lead to unauthorized access to admin panel.
2.0.0
Vulnerable
2.3.5
Vulnerable
CVE-2020-9579

Code Injection Magento has a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
2.0.0
Vulnerable
2.3.5
Vulnerable
Vulnerabilities fixed by this package (6)

Advisory Summary Aliases
CVE-2020-3717
Path Traversal Magento is vulnerable to a path traversal. Successful exploitation could lead to sensitive information disclosure.
CVE-2020-3719
SQL Injection Magento is vulnerable to SQL injection. Successful exploitation could lead to sensitive information disclosure.
CVE-2020-3718
Code Execution Magento has a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3716
Deserialization of Untrusted Data Magento has a deserialization vulnerability. Successful exploitation could lead to arbitrary code execution.
CVE-2020-3715
Cross-site Scripting Magento has a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVE-2020-3758
Cross-site Scripting Magento has a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.