tocsin

Packagist/magento/core CVE-2020-9588: high 7.2, EPSS 2.92%

Magento Signature verification bypass

Action: Upgrade magento/core to 1.9.4.5 or later.

composer require magento/core:1.9.4.5

Affected

introducedfixedlast affected
01.9.4.5-

Fixed versions

1.9.4.5

Sources

CVE-2020-9588 · published · modified · JSON