p PatchFirst

PatchFirst · Latest vulnerabilities

magneto/core vulnerabilities

Vulnerabilities published for magneto/core in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2020-3758

    Medium · CVSS 6.1EPSS 1.84%Fix available

    CVE-2020-3758

    Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

    • Update to 1.9.4.4
    Published Updated
  2. CVE-2020-3718

    Critical · CVSS 9.8EPSS 7.52%Fix available

    CVE-2020-3718

    Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

    • Update to 1.9.4.4
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →