CVE-2020-3719

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability

published January 29, 2020

CVSS
—
EPSS
3%
Percentile
87.9
In the wild
Unconfirmed
What it is

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. Successful exploitation could lead to sensitive information disclosure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03161 · 87.9th percentile
Published
2020-01-29T18:52Z
EPSS history
Timeline
  • 29 JAN 18:52Z
    Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability
    cvelistv5