Description

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.

Remediation

References

CVE-2020-9689

Related Vulnerabilities

WordPress Plugin Multi Rating Multiple Unspecified Vulnerabilities (3.2.1)

Joomla Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2018-11325)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery SQL Injection (1.5.30)

WordPress Plugin Media File Manager Multiple Vulnerabilities (1.4.2)

WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler Unspecified Vulnerability (5.1.2)

Severity

Medium

Classification

CVE-2020-9689 CWE-22 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities