Description

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. Successful exploitation could lead to sensitive information disclosure.

Remediation

References

CVE-2020-3719

Related Vulnerabilities

Oracle JRE CVE-2020-2583 Vulnerability (CVE-2020-2583)

WordPress Plugin Popups, Welcome Bar, Optins and Lead Generation-Icegram Cross-Site Scripting (2.0.2)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-5062)

WordPress 4.7 Multiple Vulnerabilities (4.7)

phpMyAdmin Other Vulnerability (CVE-2005-0567)

Severity

High

Classification

CVE-2020-3719 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities