Description

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. Successful exploitation could lead to sensitive information disclosure.

Remediation

References

CVE-2020-3719

Related Vulnerabilities

Roundcube Incorrect Resource Transfer Between Spheres Vulnerability (CVE-2026-35543)

Microsoft SQL Server CVE-2023-32026 Vulnerability (CVE-2023-32026)

MySQL CVE-2016-0503 Vulnerability (CVE-2016-0503)

WordPress Plugin Toolset Types-Custom Post Types, Custom Fields and Taxonomies Cross-Site Scripting (1.8.7.2)

OpenSSL Other Vulnerability (CVE-2015-1790)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2020-3719