Miggo Logo
Miggo Vulnerability Database
→
CVE-2020-9690

CVE-2020-9690:
Magento observable timing discrepancy vulnerability

4.2

CVSS Score
3.1

Basic Information

CVE ID
CVE-2020-9690
GHSA ID
GHSA-xgp9-j48h-jjf9
EPSS Score
0.56458%
CWE
CWE-203
Published
5/24/2022
Updated
1/11/2024
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
magento/community-editioncomposer< 2.3.5-p22.3.5-p2

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

M***nto v*rsions *.*.*-p* *n* **rli*r, *n* *.*.*-p* *n* **rli*r **v* *n o*s*rv**l* timin* *is*r*p*n*y vuln*r**ility. Su***ss*ul *xploit*tion *oul* l*** to si*n*tur* v*ri*i**tion *yp*ss.

Reasoning

No *n*lysis *v*il**l*