CVE-2020-9577
CVE-2020-9577
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
26 Jun 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure .
Affected products
Adobe · MagentoWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →