CVE-2020-9690

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability

published July 29, 2020

CVSS
—
EPSS
2%
Percentile
76.1
In the wild
Unconfirmed
What it is

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01632 · 76.1th percentile
Published
2020-07-29T12:20Z
EPSS history
Timeline
  • 29 JUL 12:20Z
    Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability
    cvelistv5