{"uuid": "d0d13dd8-0abb-4afe-a788-d7f6c39de334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-3716", "type": "seen", "source": "https://t.me/information_security_channel/34541", "content": "Magento 2.3.4 Patches Critical Code Execution Vulnerabilities\nhttp://feedproxy.google.com/~r/Securityweek/~3/Huq0iOsUnCg/magento-234-patches-critical-code-execution-vulnerabilities\n\nMagento 2.3.4 was released this week with patches for six vulnerabilities, including three that are considered critical.\nThe first of these severe security issues is related to deserialization of untrusted data. Tracked as CVE-2020-3716, the bug could lead to arbitrary code execution.\nread more (https://www.securityweek.com/magento-234-patches-critical-code-execution-vulnerabilities)", "creation_timestamp": "2020-01-29T17:05:45.000000Z"}