CVE-2020-24406: Magento information disclosure vulnerability

The vulnerability stems from path disclosure during maintenance mode. Magento's maintenance mode implementation uses specific error templates and file handling logic. The 503.phtml template (rendered during maintenance) and maintenance mode file handlers are prime candidates for path leakage, as they might inadvertently expose server paths through debug information or environment variable usage. The medium confidence reflects the lack of direct access to patch details, but aligns with common patterns in PHP application vulnerabilities where error templates or maintenance handlers leak sensitive paths.