{"action":"Upgrade magento/community-edition to 2.3.5-p2 or later.","affected":[{"fixed":"2.3.5-p2","introduced":"0"}],"component":"magento/community-edition","cve_ids":["CVE-2020-9689"],"ecosystem":"Packagist","epss":0.04138,"exploited":false,"fixed_versions":["2.3.5-p2"],"ghsa_id":"GHSA-fr6f-xmfx-rrpq","id":"tcs_01M5KF210XS0BXT2SWVHPWVGB8","modified_at":"2025-02-10T20:42:15.341471Z","published_at":"2022-05-24T17:24:40Z","references":["https://osv.dev/vulnerability/GHSA-fr6f-xmfx-rrpq","https://nvd.nist.gov/vuln/detail/CVE-2020-9689","https://github.com/magento/magento2/commit/9436781734e47c83e96977fa770d255217680d5e#diff-7c7399d1d47cdaf120a1a503b7ad87f496d98790203dc82b395ec6bc2d430a55","https://github.com/magento/magento2","https://helpx.adobe.com/security/products/magento/apsb20-47.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-fr6f-xmfx-rrpq","url":"https://osv.dev/vulnerability/GHSA-fr6f-xmfx-rrpq"}],"summary":"Magento path traversal vulnerability"}