Vulnerabilitycritical

Adobe fixes Magento flaws that can lead to code execution

Security Affairsby @securityaffairsOct 16, 2020 · 12:46 UTC (Oct 16, 2020)1 min read1 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2020-24407 CVE-2020-24400 CVE-2020-24402 CVE-2020-24408 CVE-2020-24401 CVE-2020-24404 CVE-2020-24405 CVE-2020-24403 CVE-2020-24406 CVE-2020-9746

Tags: cve-2020-24407 cve-2020-24400 cve-2020-24402 cve-2020-24408 cve-2020-24401 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Published
CVE-2020-24407 +7 related CVEs CVE-2020-24400 CVE-2020-24401 CVE-2020-24402 CVE-2020-24405 CVE-2020-24406 CVE-2020-24403 CVE-2020-24404	Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file upload vulnerability that could result in arbitrary code execution	9.1 group max	5%	Nov 9, 2020
CVE-2020-24408	Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file…	6.1	2%	Oct 16, 2020
CVE-2020-9746	Adobe Flash Player version 32.0.0.433 (and earlier) are affected by an exploitable NULL pointer dereference vulnerability that could result in a crash and…	8.8	4%	Oct 14, 2020

From the original article

1 min read at securityaffairs.com

Adobe released a series of out-of-band security fixes to address multiple Magento vulnerabilities that lead to code execution, customer list tampering. Adobe has released a series of out-of-band security fixes to address multiple Magento vulnerabilities that lead to code execution, customer list tampering.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.