NetSight
medium6.5

CVE-2020-9689

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability.

Impact

Magento versions 2.3.5-p1 and earlier, and 2.3.5-p1 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution.

Affected products

VendorProductAffected versions
MagentoMagento
before 2.3.5
Version 2.3.5

Weakness classification

References