En resumen
- CVE-2020-9690 es una vulnerabilidad MEDIO (CVSS 4.2) que afecta a magento/community-edition, magento (magento).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.8%, mayor que el 79.1% de las vulnerabilidades.
- Solución: actualizar a 2.3.5-p2, 2.3.5 o posterior.
Description
Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.
NVD description
Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.
Más vulnerabilidades de magento/community-edition
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free