CVE-2020-9689

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability

published July 29, 2020

CVSS
—
EPSS
4%
Percentile
90.8
In the wild
Unconfirmed
What it is

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04138 · 90.8th percentile
Published
2020-07-29T12:20Z
EPSS history
Timeline
  • 29 JUL 12:20Z
    Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability
    cvelistv5