Skip to content
OpenAdvisories

Archive

9 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /9 December 2020 →
  1. 18
  2. 253
  3. 354
  4. 440
  5. 560
  6. 674
  7. 73
  8. 88
  9. 942
  10. 1059
  11. 11131
  12. 12159
  13. 1337
  14. 14 
  15. 158
  16. 1677
  17. 1759
  18. 1864
  19. 1962
  20. 2017
  21. 218
  22. 22 
  23. 2357
  24. 2460
  25. 2512
  26. 2619
  27. 2733
  28. 289
  29. 299
  30. 3040
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.7
    CVE-2020-24404

    Incorrect permissions in Integrations component could lead to unauthorized deletion of cmsPages via REST API

    Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability within the Integrations component. This vulnerability could be abused by users with permissions to the Pages resource to delete cms pages via the REST API w…

    Adobe Magento Commerce magento/community-edition Web / CMS Packagist
  • Low 3.7
    CVE-2020-24406

    Document root path disclosure on Maintenance page

    When in maintenance mode, Magento version 2.4.0 and 2.3.4 (and earlier) are affected by an information disclosure vulnerability that could expose the installation path during build deployments. This information could be helpful to attackers if they are able t…

    Adobe Magento Commerce magento/community-edition Web / CMS Packagist
  • Low 2.7
    CVE-2020-24403

    Incorrect permissions could lead to unauthorized modification of inventory source data via REST API

    Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect user permissions vulnerability within the Inventory component. This vulnerability could be abused by authenticated users with Inventory and Source permissions to make unauthorized ch…

    Adobe Magento Commerce magento/community-edition magento/project-community-edition Web / CMS Packagist