Magneto Core vulnerabilities

2 known vulnerabilities affecting magneto/core.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2020-3718CRITICAL≥ 0, < 1.9.4.42022-05-24

CVE-2020-3718 [CRITICAL] Magento security bypass vulnerability Magento security bypass vulnerability Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

CVE-2020-3758MEDIUM≥ 0, < 1.9.4.42022-05-24

CVE-2020-3758 [MEDIUM] CWE-79 Magento stored cross-site scripting vulnerability Magento stored cross-site scripting vulnerability Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.