CVE-2020-9664

Code Injection in packagist/magento/community-edition

Identifiers

CVE-2020-9664

Package Slug

packagist/magento/community-edition

Vulnerability

Code Injection

Description

Magento has a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected Versions

All versions up to 1.9.4.5

Solution

Upgrade to version 2.0.0 or above.

Last Modified

2020-07-27

source