CVE-2020-9631
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vul...
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
magento
[{"type":"SEMVER","events":[{"introduced":"2.2.0"},{"fixed":"2.2.12"},{"introduced":"2.3.0"},{"fixed":"2.3.5"}]}]
参照URL
- advisory helpx.adobe.com
- web nvd.nist.gov