CVE-2020-9664
CVE-2020-9664
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS 9.8 · Critical · EPSS 8.4%
- Published
- Updated
Stack: php
Affected products and versions
magento
- Versions
- 1.14.4.5 and earlier, and 1.9.4.5 and earlier versions: Affected
No fix published
magento/core Packagist
- Affected ranges
- ECOSYSTEM: ≤ 1.9.4.5
No fix published