Magento up to 1.9.4.3/1.14.4.3/2.2.10/2.3.3 path traversal

Summaryinfo

A vulnerability identified as problematic has been detected in Magento up to 1.9.4.3/1.14.4.3/2.2.10/2.3.3. This impacts an unknown function. The manipulation leads to path traversal. This vulnerability is listed as CVE-2020-3717. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability was found in Magento up to 1.9.4.3/1.14.4.3/2.2.10/2.3.3. It has been rated as problematic. This issue affects some unknown functionality. The manipulation with an unknown input leads to a path traversal vulnerability. Using CWE to declare the problem leads to CWE-22. The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory. Impacted is confidentiality. The summary by CVE is:

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a path traversal vulnerability. Successful exploitation could lead to sensitive information disclosure.

The weakness was presented 01/29/2020 as APSB20-02 as confirmed security bulletin (Website). It is possible to read the advisory at helpx.adobe.com. The identification of this vulnerability is CVE-2020-3717 since 12/17/2019. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1006 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See VDB-149541, VDB-149542, VDB-149544 and VDB-149545 for similar entries. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• E-Commerce Management Software

Name

• Magento

Version

• 1.9.4.0
• 1.9.4.1
• 1.9.4.2
• 1.9.4.3
• 1.14.4.0
• 1.14.4.1
• 1.14.4.2
• 1.14.4.3
• 2.2.0
• 2.2.1
• 2.2.2
• 2.2.3
• 2.2.4
• 2.2.5
• 2.2.6
• 2.2.7
• 2.2.8
• 2.2.9
• 2.2.10
• 2.3.0
• 2.3.1
• 2.3.2
• 2.3.3

License

• open-source

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion