CVE-2023-42428

EPSS 1.3%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 1.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

17 nov 2023Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system.

Productos afectados

CubeCart Limited · CubeCart

Referencias

https://forums.cubecart.com/topic/58736-cubecart-653-released-security-update/https://jvn.jp/en/jp/JVN22220399/