CVE-2024-50945

CVSS 7.5 HIGHEPSS 0.6%CWE-284

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.5EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

27 dez 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An improper access control vulnerability exists in SimplCommerce at commit 230310c8d7a0408569b292c5a805c459d47a1d8f, allowing users to submit reviews without verifying if they have purchased the product.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Produtos afetados

n/a · n/a

Referências

https://github.com/AbdullahAlmutawa/CVE-2024-50945 https://github.com/simplcommerce/SimplCommerce https://www.simplcommerce.com/