Critical severityNVD Advisory· Published Jul 22, 2020· Updated Aug 4, 2024
CVE-2020-9664
CVE-2020-9664
Description
Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
magento/corePackagist | <= 1.9.4.5 | — |
Affected products
2- Range: 1.14.4.5 and earlier, and 1.9.4.5 and earlier versions
Patches
Vulnerability mechanics
References
3- github.com/advisories/GHSA-337c-3rch-q35jghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2020-9664ghsaADVISORY
- helpx.adobe.com/security/products/magento/apsb20-41.htmlghsax_refsource_CONFIRMWEB
News mentions
0No linked articles in our index yet.