Lucene search

K
osvGoogleOSV:GHSA-J2R4-2CR6-H3R3
HistoryMay 24, 2022 - 5:21 p.m.

Magento Signature verification bypass

2022-05-2417:21:49
Google
osv.dev
5

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.3%

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have an observable timing discrepancy vulnerability. Successful exploitation could lead to signature verification bypass.

6.6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.3%