DemoBook a demo

Vulnerability advisory

CVE-2020-3715

Published Updated OSV record ↗

Also known as BIT-magento-2020-3715GHSA-mgg3-v948-2vgr

Severity
  • CVSS 3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected versions

Repository

Affected commitsFixed by commit
GIT github.com/magento/devdocs ↗
239bfc72e116f6814ff6c2f6731f0830f3bcf61c through fe462f46d5efe781681fa25067a180b19e0e35deNo fix listed
75da24b3b0fb950648d00e7454dae0bb7da64c30 through fe462f46d5efe781681fa25067a180b19e0e35deNo fix listed
Also listed as affected (12)
  • 2.3.0
  • 2.2.7
  • 2.1.16
  • 2.3.3
  • 2.3.2-p1
  • 2.2.10
  • 2.3.2
  • 2.2.9
  • 2.1.18
  • 2.3.1
  • 2.2.8
  • 2.1.17
GIT github.com/magento/magento2 ↗
07465f8ce879ff0bd0ba72a662c9e2473e49afe4 through 2dd1e1a37a798fd7fd08d6894eb37bcccc99d1c6No fix listed
f4c1d7526f05bdfb1327b0701cc345f94aadcaed through 7aa94564d85e408baea01abc5315a0441401c375No fix listed
Also listed as affected (4)
  • 2.3.3
  • 2.3.2
  • 2.3.1
  • 2.3.0

Description

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

References

  • Codex
  • Claude Code
  • VS Code
  • GitHub Copilot
  • Cursor
  • Cline
  • Windsurf
  • Google Anti-gravity
  • OpenCode
  • Pi
  • Gemini CLI
  • Hermes Agent
  • Zed
  • Junie
  • Qwen Code
  • Kiro
  • Kilo Code
  • Factory Droid

Set up GitHits for your agents

Run this command:

<> bash
npx githits@latest init

What happens next:

  1. Opens your browser to authorize GitHits
  2. Asks whether to set up GitHits at the user or project level
  3. Detects your supported AI coding tools
  4. Lets you choose which tools to configure
  5. Configures the selected tools

Having trouble? Check our documentation.