Miggo Logo
Miggo Vulnerability Database
→
CVE-2024-20716

CVE-2024-20716: Magento Open Source allows Uncontrolled Resource Consumption

4.9

CVSS Score
3.1

Basic Information

CVE ID
CVE-2024-20716
GHSA ID
GHSA-c9h9-h5gf-885r
EPSS Score
0.35523%
CWE
CWE-400
Published
2/15/2024
Updated
3/4/2025
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Package NameEcosystemVulnerable VersionsFirst Patched Version
magento/community-editioncomposer= 2.4.6
magento/community-editioncomposer= 2.4.5
magento/community-editioncomposer= 2.4.4
magento/community-editioncomposer>= 2.4.6-p1, < 2.4.6-p42.4.6-p4
magento/community-editioncomposer>= 2.4.5-p1, < 2.4.5-p62.4.5-p6
magento/community-editioncomposer>= 2.4.4-p1, < 2.4.4-p72.4.4-p7
magento/project-community-editioncomposer<= 2.0.2

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

**o** *omm*r** v*rsions *.*.*-p*, *.*.*-p*, *.*.*-p* *n* **rli*r *r* *****t** *y *n Un*ontroll** R*sour** *onsumption vuln*r**ility t**t *oul* l*** to *n *ppli**tion **ni*l-o*-s*rvi**. * *i**-privil**** *tt**k*r *oul* l*v*r*** t*is vuln*r**ility to *

Reasoning

No *n*lysis *v*il**l*