Executive brief
Magento Signature verification bypass
Affected products
- Packagist magento/community-edition
- Packagist magento/project-community-edition
- Packagist magento/core
Junglewise Threat Intelligence
CVE-2020-9588: Magento Signature verification bypass
CVE-2020-9588 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: magento/community-edition (Packagist), magento/project-community-edition (Packagist), magento/core (Packagist). Vendors: Packagist.
Related threats
- Magento Open Source Security Advisory: Patch SUPEE-10975
- Magento Patch SUPEE-9652 - Remote Code Execution using mail vulnerability
- Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities
- Magento Patch SUPEE-10752 - Multiple security enhancements vulnerabilities
- Magento 2 Community Edition RCE via Unsafe File Upload