CVE-2020-9692: Magento security mitigation bypass vulnerability
Magento security mitigation bypass vulnerability
Other sources
Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/magento/community-editionto a version that resolves this vulnerability.Fixed in 2.3.5-p2
Event History
Frequently Asked Questions
What is CVE-2020-9692?
CVE-2020-9692 is a security mitigation bypass vulnerability in Magento versions 2.3.5-p1 and earlier.
What is the severity of CVE-2020-9692?
CVE-2020-9692 has a severity rating of high.
How can CVE-2020-9692 be exploited?
Successful exploitation of CVE-2020-9692 could lead to arbitrary code execution.
Which versions of Magento are affected by CVE-2020-9692?
Magento versions 2.3.5-p1 and earlier are affected by CVE-2020-9692.
Is there a fix available for CVE-2020-9692?
Yes, a fix for CVE-2020-9692 is available. It is recommended to update to Magento versions 2.3.5-p2 or later.