exploitDog

CVE-2024-33438

Опубликовано: 29 апр. 2024

Источник: nvd

CVSS3: 8

EPSS Низкий

Описание

File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted .phar file.

Ссылки

https://forums.cubecart.com/topic/59046-cubecart-655-released-minor-security-update/
Release Notes
https://github.com/cubecart/v6
Product
https://github.com/cubecart/v6/commit/31a5ec39b0924b2111fbc3aa419bd8c5c3fc1841
Patch
https://github.com/julio-cfa/CVE-2024-33438
Broken Link
Exploit
Third Party Advisory
https://forums.cubecart.com/topic/59046-cubecart-655-released-minor-security-update/
Release Notes
https://github.com/cubecart/v6
Product
https://github.com/cubecart/v6/commit/31a5ec39b0924b2111fbc3aa419bd8c5c3fc1841
Patch
https://github.com/julio-cfa/CVE-2024-33438
Broken Link
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:cubecart:cubecart:*:*:*:*:*:*:*:*

Версия до 6.5.5 (исключая)

EPSS

Процентиль: 36%

0.00151

Низкий

8 High

CVSS3

Дефекты

CWE-434

Связанные уязвимости

GHSA-x58x-j223-hqhm

CVSS3: 8

github

почти 2 года назад

File Upload vulnerability in CubeCart before 6.5.5 allows an authenticated user to execute arbitrary code via a crafted .phar file.

EPSS

Процентиль: 36%

0.00151

Низкий

8 High

CVSS3

Дефекты

CWE-434

Уязвимость CVE-2024-33438