exploitDog

CVE-2023-27568

Опубликовано: 04 мая 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

SQL injection vulnerability inSpryker Commerce OS 0.9 that allows for access to sensitive data via customer/order?orderSearchForm[searchText]=

Ссылки

http://packetstormsecurity.com/files/172257/Spryker-Commerce-OS-1.0-SQL-Injection.html
Exploit
Third Party Advisory
http://seclists.org/fulldisclosure/2023/May/2
Exploit
Third Party Advisory
https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2023-001.txt
Exploit
Third Party Advisory
https://www.schutzwerk.com/blog/schutzwerk-sa-2023-001/
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/172257/Spryker-Commerce-OS-1.0-SQL-Injection.html
Exploit
Third Party Advisory
http://seclists.org/fulldisclosure/2023/May/2
Exploit
Third Party Advisory
https://www.schutzwerk.com/advisories/SCHUTZWERK-SA-2023-001.txt
Exploit
Third Party Advisory
https://www.schutzwerk.com/blog/schutzwerk-sa-2023-001/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:spryker:commerce_os:0.9:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00151

Низкий

8.8 High

CVSS3

Дефекты

CWE-89

CWE-89

Связанные уязвимости

GHSA-rhgc-74xq-pwjh

CVSS3: 8.8

github

почти 3 года назад

SQL injection vulnerability inSpryker Commerce OS 0.9 that allows for access to sensitive data via customer/order?orderSearchForm[searchText]=

EPSS

Процентиль: 36%

0.00151

Низкий

8.8 High

CVSS3

Дефекты

CWE-89

CWE-89