CVE-2023-50028

Опубликовано: 19 янв. 2024

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

In the module "Sliding cart block" (blockslidingcart) up to version 2.3.8 from PrestashopModules.eu for PrestaShop, a guest can perform SQL injection.

Ссылки

https://addons.prestashop.com/en/express-checkout-process/3321-block-sliding-cart.html
Product
https://security.friendsofpresta.org/modules/2024/01/16/blockslidingcart.html
Exploit
Patch
Third Party Advisory
https://addons.prestashop.com/en/express-checkout-process/3321-block-sliding-cart.html
Product
https://security.friendsofpresta.org/modules/2024/01/16/blockslidingcart.html
Exploit
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:prestashopmodules:sliding_cart_block:*:*:*:*:*:prestashop:*:*

Версия до 2.3.8 (исключая)

EPSS

Процентиль: 34%

0.00138

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-g66x-8mq7-q4q7