CVE-2020-9630

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a business logic error vulnerabi...

Original description

The description as published by the source.

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a business logic error vulnerability. Successful exploitation could lead to privilege escalation.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami magento

[{"type":"SEMVER","events":[{"introduced":"2.2.0"},{"fixed":"2.2.12"},{"introduced":"2.3.0"},{"fixed":"2.3.5"}]}]

References

advisory helpx.adobe.com
web nvd.nist.gov