Описание
Privilege Escalation in express-cart
Versions of express-cart before 1.1.6 are vulnerable to privilege escalation. This vulnerability can be exploited so that normal users can escalate their privilege and add new administrator users.
Recommendation
Update to version 1.1.6 or later.
Пакеты
Наименование
express-cart
npm
Затронутые версииВерсия исправления
< 1.1.6
1.1.6
9.8 Critical
CVSS3
9.8 Critical
CVSS3