Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Magento Observable Differences in Behavior to Error Inputs Vulnerability - CVE-2020-15151 - Vulnerability Database
Magento

Magento Observable Differences in Behavior to Error Inputs Vulnerability - CVE-2020-15151

High
Reference: CVE-2020-15151
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-15151
Title: Magento Observable Differences in Behavior to Error Inputs Vulnerability
Overview:

OpenMage LTS before versions 19.4.6 and 20.0.2 allows attackers to circumvent the fromkey protection in the Admin Interface and increases the attack surface for Cross Site Request Forgery attacks. This issue is related to Adobe39s CVE-2020-9690. It is patched in versions 19.4.6 and 20.0.2.