VULNERABILITY INTELLIGENCE

CVE-2020-3719

CVSS score7.5 HIGH
EPSS probability3.16%
CISA KEVNot currently listed
Published2020-01-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. Successful exploitation could lead to sensitive information disclosure.

Weakness classification

  • nvd@nist.gov: CWE-89

Primary references