Описание
Incorrect Permission Assignment for Critical Resource in ShopXO
ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.php.
Пакеты
Наименование
shopxo/shopxo
composer
Затронутые версииВерсия исправления
< 2.2.6
2.2.6
Связанные уязвимости
CVSS3: 9.8
nvd
почти 4 года назад
ShopXO v2.2.5 and below was discovered to contain a system re-install vulnerability via the Add function in app/install/controller/Index.php.