Recently modified vulnerabilities for "magento magento" 2.3.5

Where

AND

Sort:

OpenMage Openmage Long Term SupportObservable Timing Discrepancy in OpenMage LTS

Risk 58

Severity

CSRF

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Impact This vulnerability allows to circumvent the formkey protection in the Admin Interface and increases the attack surface for Cross Site Request Forgery attacks

Patches The latest OpenMage Versions up from 19.4.6 and 20.0.2 have this Issue solved

References Related to Adobes CVE-2020-9690 ( https://helpx.adobe.com/security/products/magento/apsb20-47.html ) fixed in Magento2 https://github.com/magento/magento2/commit/52d72b8010c9cecb5b8e3d98ec5edc1ddcc65fb4 as part of 2.4.0/2.3.5-p2

1 / 3

Source: GitHub

First published (updated )

CVE-2020-15151

composer/magento/community-editionMagento observable timing discrepancy vulnerability

Risk 25

Severity

4.2

AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Magento observable timing discrepancy vulnerability

1 / 2

Source: Packagist

First published (updated )

CVE-2020-9690

composer/magento/project-community-editionMagento DOM-based Cross-site scripting vulnerability

Risk 84

Severity

9.7

XSS

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Magento DOM-based Cross-site scripting vulnerability

1 / 2

Source: Packagist

First published (updated )

CVE-2020-9691

composer/magento/project-community-editionMagento path traversal vulnerability

Risk 75

Severity

6.5

Path Traversal

AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Magento path traversal vulnerability

1 / 2

Source: Packagist

First published (updated )

CVE-2020-9689

composer/magento/community-editionMagento security mitigation bypass vulnerability

Risk 75

Severity

6.5

AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Magento security mitigation bypass vulnerability

1 / 2

Source: Packagist

First published (updated )

CVE-2020-9692

composer/magento/community-editionMagento 2 Community Edition XSS Vulnerability

Risk 38

Severity

6.1

XSS

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Magento 2 Community Edition XSS Vulnerability

1 / 2

Source: Packagist

First published (updated )

CVE-2020-24408

composer/magento/project-community-editionMagento 2 Community Edition RCE via Unsafe File Upload

Risk 73

Severity

9.1

Malicious File Upload

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Magento 2 Community Edition RCE via Unsafe File Upload

1 / 2

Source: Packagist

First published (updated )

CVE-2020-24407

composer/magento/project-community-editionMagento incorrect permissions vulnerability in the Integrations component

Risk 36

Severity

4.9

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Magento incorrect permissions vulnerability in the Integrations component

1 / 2

Source: Packagist

First published (updated )

CVE-2020-24402

composer/magento/project-community-editionMagento incorrect user permissions vulnerability within the Inventory component

Risk 22

Severity

2.7

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Magento incorrect user permissions vulnerability within the Inventory component

1 / 2

Source: Packagist

First published (updated )

CVE-2020-24403

composer/magento/community-editionMagento incorrect permissions vulnerability in the Inventory module

Risk 23

Severity

4.3

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Magento incorrect permissions vulnerability in the Inventory module

1 / 2

Source: Packagist

First published (updated )

CVE-2020-24405

composer/magento/community-editionMagento 2 Community Edition vulnerable to Improper Authorization

Risk 35

Severity

2.7

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Magento 2 Community Edition vulnerable to Improper Authorization

1 / 2

Source: Packagist

First published (updated )

CVE-2020-24404

composer/magento/community-editionMagento SQL Injection vulnerability

Risk 50

Severity

7.1

SQL Injection

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Magento SQL Injection vulnerability

1 / 2

Source: Packagist

First published (updated )

CVE-2020-24400

composer/magento/project-community-editionMagento 2 Community Edition Incorrect Authorization

Risk 50

Severity

6.5

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Magento 2 Community Edition Incorrect Authorization

1 / 2

Source: Packagist

First published (updated )

CVE-2020-24401

Trending

OpenMage Openmage Long Term SupportObservable Timing Discrepancy in OpenMage LTS

composer/magento/community-editionMagento observable timing discrepancy vulnerability

composer/magento/project-community-editionMagento DOM-based Cross-site scripting vulnerability

composer/magento/project-community-editionMagento path traversal vulnerability

composer/magento/community-editionMagento security mitigation bypass vulnerability

composer/magento/community-editionMagento 2 Community Edition XSS Vulnerability

composer/magento/project-community-editionMagento 2 Community Edition RCE via Unsafe File Upload

composer/magento/project-community-editionMagento incorrect permissions vulnerability in the Integrations component

composer/magento/project-community-editionMagento incorrect user permissions vulnerability within the Inventory component

composer/magento/community-editionMagento incorrect permissions vulnerability in the Inventory module

composer/magento/community-editionMagento 2 Community Edition vulnerable to Improper Authorization

composer/magento/community-editionMagento SQL Injection vulnerability

composer/magento/project-community-editionMagento 2 Community Edition Incorrect Authorization

Company

Resources

Contact