Miggo Logo
Miggo Vulnerability Database
→
CVE-2020-24400

CVE-2020-24400:
Magento SQL Injection vulnerability

7.1

CVSS Score
3.1

Basic Information

CVE ID
CVE-2020-24400
GHSA ID
GHSA-pf6w-3pfw-fxvw
EPSS Score
0.41109%
CWE
CWE-89
Published
5/24/2022
Updated
1/11/2024
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
magento/community-editioncomposer< 2.3.62.3.6
magento/community-editioncomposer= 2.4.02.4.1

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis

The vulnerability involves SQL injection via authenticated access to the product listing page. Magento's product grid uses collections with addFieldToFilter to build WHERE clauses. If user input from grid filters (like sort parameters or search criteria) is passed directly to this method without proper sanitization, it could enable SQL injection. This aligns with Magento's architecture patterns and known historical vulnerabilities (e.g., CVE-2019-8141) where improper input handling in collection filters led to SQLi. The first patched versions (2.3.6/2.4.1) likely introduced input validation/escaping in this method's implementation.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

WAF Protection Rules

WAF Rule

M***nto v*rsions *.*.* *n* *.*.* (*n* **rli*r) *r* *****t** *y *n SQL Inj**tion vuln*r**ility t**t *oul* l*** to s*nsitiv* in*orm*tion *is*losur*. T*is vuln*r**ility *oul* ** *xploit** *y *n *ut**nti**t** us*r wit* p*rmissions to t** pro*u*t listin*

Reasoning

T** vuln*r**ility involv*s SQL inj**tion vi* *ut**nti**t** ****ss to t** pro*u*t listin* p***. M***nto's pro*u*t *ri* us*s *oll**tions wit* `****i*l*To*ilt*r` to *uil* W**R* *l*us*s. I* us*r input *rom *ri* *ilt*rs (lik* sort p*r*m*t*rs or s**r** *ri