Archive

9 November 2020

Vulnerabilities first published on this day (UTC), newest first.

← October 2020 2020 / November /9 December 2020 →

All Critical High Medium Low Exploited only Public exploit

42 results · Feed

Medium 4.9

CVE-2020-24402

Incorrect permissions in the Integrations component could lead to unauthorized deletion of customer details via REST API

Magento version 2.4.0 and 2.3.5p1 (and earlier) are affected by an incorrect permissions vulnerability in the Integrations component. This vulnerability could be abused by authenticated users with permissions to the Resource Access API to delete customer deta…

Adobe Magento Commerce magento/community-edition magento/project-community-edition Web / CMS Packagist

Nov 9, 2020
High 7.1

CVE-2020-24400

SQL injection allows arbitrary read from database

Magento versions 2.4.0 and 2.3.5 (and earlier) are affected by an SQL Injection vulnerability that could lead to sensitive information disclosure. This vulnerability could be exploited by an authenticated user with permissions to the product listing page to r…

Adobe Magento Commerce magento/community-edition Web / CMS Packagist

Nov 9, 2020