7.2
CVE-2023-40219
- EPSS 0.46%
- Veröffentlicht 27.09.2023 15:19:02
- Zuletzt bearbeitet 20.02.2025 18:34:50
- Quelle vultures@jpcert.or.jp
- CVE-Watchlists
- Unerledigt
LoginWelcart e-Commerce <= 2.8.21 - Authenticated(Editor+) Arbitrary File Upload
Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor or higher privilege to upload an arbitrary file to an unauthorized directory.
Mögliche Gegenmaßnahme
Welcart e-Commerce: Update to version 2.8.22, or a newer patched version
Weitere Schwachstelleninformationen
SystemWordPress Plugin
≫
Produkt
Welcart e-Commerce
Version
* - 2.8.21
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Welcart ≫ Welcart E-commerce SwPlatformwordpress Version >= 2.7 <= 2.8.21
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.46% | 0.632 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.2 | 1.2 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
CWE-434 Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.