Executive brief
Magento observable timing discrepancy vulnerability
Affected products
- Packagist magento/community-edition
Junglewise Threat Intelligence
CVE-2020-9690: Magento observable timing discrepancy vulnerability
CVE-2020-9690 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: magento/community-edition (Packagist). Vendors: Packagist.
Related threats
- Magento Open Source Security Advisory: Patch SUPEE-10975
- Magento Patch SUPEE-9652 - Remote Code Execution using mail vulnerability
- Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities
- Magento Patch SUPEE-10752 - Multiple security enhancements vulnerabilities
- Magento 2 Community Edition RCE via Unsafe File Upload