CVE-2020-9692

Incorrect Authorization in packagist/magento/community-edition

Identifiers

CVE-2020-9692

Package Slug

packagist/magento/community-edition

Vulnerability

Incorrect Authorization

Description

Magento has a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected Versions

All versions before 2.3.5-p2

Solution

Upgrade to version 2.3.5-p2 or above.

Last Modified

2020-07-31

source