CVE-2020-9690

Magento versions 2.3.5 and earlier, and 2.3.5 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to s...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Magento versions 2.3.5 and earlier, and 2.3.5 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Paquets affectés

Bitnami magento

[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.3.5"}]}]

Références

advisory helpx.adobe.com
web nvd.nist.gov