[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fSZ9HDfUspkK-WBPb7b0_slPWL2lXMybMAyqeSfWIC04":3,"g5a-risk:CVE-2020-8818":127},{"success":4,"data":5,"meta":125},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":54,"references":55,"referencesCount":70,"weaknesses":71,"weaknessesCount":80,"isActivelyExploited":81,"cisaInfo":26,"otxData":26,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":123,"notableEvents":124},"CVE-2020-8818","What is CVE-2020-8818?","An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller\u002FPayment\u002FCallback.php allows an attacker to remotely replace critical plugin settings (merchant ID, secret key, etc.) and therefore bypass the payment process (e.g., spoof an order status by manually sending an IPN callback request with a valid signature but without real payment) and\u002For receive all of the subsequent payments.","An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function i...","2020-02-25T02:15:12.097","2020-03-05T18:06:25.017",8.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.2,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:N","SINGLE","PARTIAL",5.5,"MEDIUM",8,4.9,0.0417,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"cardgate","cardgate_payments","*","cpe:2.3:a:cardgate:cardgate_payments:*:*:*:*:*:*:*:*",{"vendor":50,"product":51,"version":52,"criteria":53,"vulnerable":4},"adobe","magento","2.3.4","cpe:2.3:a:adobe:magento:2.3.4:*:*:*:*:*:*:*",2,[56,63,67],{"url":57,"source":58,"tags":59},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F156505\u002FMagento-WooCommerce-CardGate-Payment-Gateway-2.0.30-Bypass.html","Packetstormsecurity",[60,61,62],"Exploit","Third Party Advisory","VDB Entry",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fgithub.com\u002Fcardgate\u002Fmagento2\u002Fblob\u002F715979e54e1a335d78a8c5586f9e9987c3bf94fd\u002FController\u002FPayment\u002FCallback.php#L88-L107","GitHub",[60,61],{"url":68,"source":65,"tags":69},"https:\u002F\u002Fgithub.com\u002Fcardgate\u002Fmagento2\u002Fissues\u002F54",[60,61],3,[72],{"id":73,"name":74,"description":75,"extendedDescription":76,"status":77,"abstraction":78,"structure":79},"CWE-346","Origin Validation Error","The product does not properly verify that the source of data or communication is valid.","","Draft","Class","Simple",1,false,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2020-8818? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-8818, a high severity cyber security vulnerability from 2020. An issue was discovered in the CardGate Payments plugin thro...","CVE-2020-8818, CVE-2020-8818 vulnerability, CVE-2020-8818 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, cardgate security, adobe security, cardgate_payments vulnerability, magento vulnerability","\u002Fwhat-is\u002Fcve-2020-8818",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-8818","Cybersecurity","CVE-2020-8818, CVE-2020-8818 vulnerability, CVE-2020-8818 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109,117],{"Operator":26,"Negate":26,"Nodes":110},[111],{"Operator":112,"Negate":26,"CPEMatch":113},"OR",[114],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":116},"7BD035FF-55DF-417A-99B2-8D6B574A8010","2.0.30",{"Operator":26,"Negate":26,"Nodes":118},[119],{"Operator":112,"Negate":26,"CPEMatch":120},[121],{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":122,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"13054AA9-B4EF-40F2-9768-C4C00F766D40",[],[],{"lastModified":11,"cacheTime":126,"version":32},1793219408375,{"score":128,"band":129,"action":130,"scoredAt":131},48,"Medium","Plan remediation","2026-10-28T06:47:59.433348+00:00"]