CVE-2020-9583: Command Injection
Published Jun 26, 2020
·Updated
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
Affected Software
10 affected componentsFixes available
composer/magento/project-community-edition<=2.0.2
composer/magento/core<1.9.4.5
1.9.4.5
composer/magento/community-edition>=2.3.0<2.3.4-p2
2.3.4-p2
composer/magento/community-edition<=2.2.11
Magento Magento<=1.9.4.4
Magento Magento<=1.14.4.4
Magento Magento>=2.2.0<=2.2.11
Magento Magento>=2.2.0<=2.2.11
Magento Magento>=2.3.0<=2.3.4
Magento Magento>=2.3.0<=2.3.4
Event History
Jun 26, 2020
CVE Published
via MITRE·08:19 PM
Data Sourced
via MITRE·08:19 PM
DescriptionWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
May 24, 2022
Advisory Published
via GitHub·05:21 PM
Data Sourced
via GitHub·05:21 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Magento vulnerability?
The vulnerability ID for this Magento vulnerability is CVE-2020-9583.
2
What is the severity level of CVE-2020-9583?
The severity level of CVE-2020-9583 is critical, with a CVSS score of 9.8.
3
Which versions of Magento are affected by CVE-2020-9583?
Magento versions 2.3.4 and earlier, 2.2.11 and earlier, 1.14.4.4 and earlier, and 1.9.4.4 and earlier are affected by CVE-2020-9583.
4
What is the impact of successfully exploiting CVE-2020-9583?
Successful exploitation of CVE-2020-9583 could lead to arbitrary code execution.
5
Where can I find more information about CVE-2020-9583?
You can find more information about CVE-2020-9583 at the following link: [CVE-2020-9583](https://helpx.adobe.com/security/products/magento/apsb20-22.html)