CVE-2020-9690

Magento versions 2.3.5 and earlier, and 2.3.5 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to s...

Original description

The description as published by the source.

Magento versions 2.3.5 and earlier, and 2.3.5 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Affected packages

Bitnami magento

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.3.5"}]}]

References

advisory helpx.adobe.com
web nvd.nist.gov