Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rrmq-wq3p-q78r

Опубликовано: 20 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order.

Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order.

EPSS

Процентиль: 56%
0.00334
Низкий

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8
nvd
больше 3 лет назад

Improper input validation vulnerability in Mangboard commerce package could lead to occur for abnormal request. A remote attacker can exploit this vulnerability to manipulate the total order amount into a negative number and then pay for the order.

EPSS

Процентиль: 56%
0.00334
Низкий

7.5 High

CVSS3

Дефекты

CWE-20