GHSA-rr59-pjwj-6grj

ghsaUSosv

Magento sql injection vulnerability

view advisory published 2022-05-24Licence: CC-BY-4.0

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. Successful exploitation could lead to sensitive information disclosure.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-3719US	high7.5	3.16% (88th)	—	2020-01-29
Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. Successful exploitation could lead to sen…

references

External citations — patches, advisories, analysis.

https://github.com/magento/magento2PACKAGE
https://helpx.adobe.com/security/products/magento/apsb20-02.htmlWEB
https://nvd.nist.gov/vuln/detail/CVE-2020-3719ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan