Lucene search
GoogleOSV:CVE-2020-24407HistoryNov 09, 2020 - 1:15 a.m.
CVE-2020-24407
2020-11-0901:15:12
Google
osv.dev
23
magento
file upload vulnerability
arbitrary code execution
administrative permissions
software
Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components.
Related
cve
cve
CVE-2020-24407
2020-11-09 01:15:12
github
github
Magento 2 Community Edition RCE via Unsafe File Upload
2022-05-24 17:33:56
prion
prion
Remote code execution
2020-11-09 01:15:00
osv
osv
BIT-magento-2020-24407
2024-03-06 11:07:21
Magento 2 Community Edition RCE via Unsafe File Upload
2022-05-24 17:33:56
cvelist
cvelist
CVE-2020-24407 Arbitrary code execution via file import functionality
2020-11-09 00:39:56
nvd
nvd
CVE-2020-24407
2020-11-09 01:15:12
zdt
zdt
Magento 2.4.0 / 2.3.5p1 (and earlier) Arbitrary Code Execution 0day Exploit
2021-03-24 00:00:00
threatpost
threatpost
Critical Industrial Flaws Pose Patching Headache For Manufacturers
2020-09-23 15:32:55
Critical Slack Bug Allows Access to Private Channels, Conversations
2020-08-31 15:36:29
WooCommerce Falls to Fresh Card-Skimmer Malware
2020-04-10 21:37:37
openvas
openvas
Magento < 2.3.6, 2.4.x < 2.4.1 Multiple Vulnerabilities (APSB20-59)
2020-10-23 00:00:00
adobe
adobe
APSB20-59 Security updates available for Magento
2020-10-15 00:00:00