Magento security mitigation bypass vulnerability

MOYENNE 6.5CVE-2020-9692 · BIT-magento-2020-9692 · GHSA-vqg7-8v6x-54rq · Published 29/07/2020 · updated 17/06/2026

En bref

CVE-2020-9692 est une vulnérabilité MOYENNE (CVSS 6.5) touchant magento/community-edition, magento (magento).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.8%, plus élevée que 90.0% des vulnérabilités.
Correctif : mettre à jour vers 2.3.5-p2, 2.3.5 ou plus récent.

Package	Affected versions	Patched versions
magento/community-edition Packagist	`< 2.3.5-p2`	`2.3.5-p2`
magento magento	`= 2.3.5< 2.3.5`	`2.3.5`

Description

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

NVD description

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

References

nvd.nist.gov/vuln/detail/CVE-2020-9692 · ADVISORY
magento/magento2 commit 9436781 · WEB
magento/magento2 · PACKAGE
helpx.adobe.com/security/products/magento/apsb20-47.html · WEB

Autres vulnérabilités de magento/community-edition

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

magento/community-edition

Packagist

< 2.3.5-p2

2.3.5-p2

magento

= 2.3.5< 2.3.5

2.3.5

Description

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

NVD description

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

Autres vulnérabilités de magento/community-edition

Tout voir →