Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9jfw-fmcq-hgjp

Опубликовано: 01 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.3

Описание

Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product.

Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product.

EPSS

Процентиль: 76%
0.00932
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 8.8
nvd
10 месяцев назад

Welcart e-Commerce 2.11.6 and earlier versions contains an untrusted data deserialization vulnerability. If this vulnerability is exploited, arbitrary code may be executed by a remote unauthenticated attacker who can access websites created using the product.

EPSS

Процентиль: 76%
0.00932
Низкий

6.3 Medium

CVSS3

Дефекты

CWE-502