Miggo Logo
Miggo Vulnerability Database
→
CVE-2020-9583

CVE-2020-9583: Magento command injection vulnerability

9.8

CVSS Score
3.1

Basic Information

CVE ID
CVE-2020-9583
GHSA ID
GHSA-c55h-7q4j-g6rq
EPSS Score
0.86309%
CWE
CWE-78
Published
5/24/2022
Updated
2/10/2025
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
magento/community-editioncomposer<= 2.2.11
magento/community-editioncomposer>= 2.3.0, < 2.3.4-p22.3.4-p2
magento/corecomposer< 1.9.4.51.9.4.5
magento/project-community-editioncomposer<= 2.0.2

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

M***nto v*rsions *.*.* *n* **rli*r, *.*.** *n* **rli*r (s** not*), *.**.*.* *n* **rli*r, *n* *.*.*.* *n* **rli*r **v* * *omm*n* inj**tion vuln*r**ility. Su***ss*ul *xploit*tion *oul* l*** to *r*itr*ry *o** *x**ution.

Reasoning

No *n*lysis *v*il**l*