CVE-2024-21519

2024-06-2205:15:11

CWE-20

[email protected]

web.nvd.nist.gov

cve-2024-21519

database restoration

admin privileges

backup file

arbitrary filename

php code injection

storage path

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0005 Low

EPSS

Percentile

17.8%

JSON

This affects versions of the package opencart/opencart from 4.0.0.0. An Arbitrary File Creation issue was identified via the database restoration functionality. By injecting PHP code into the database, an attacker with admin privileges can create a backup file with an arbitrary filename (including the extension), within /system/storage/backup.

Note:

It is less likely for the created file to be available within the web root, as part of the security recommendations for the application suggest moving the storage path outside of the web root.

Affected configurations

NVD

Node

opencartopencartRange4.0.0.0≥

CPENameOperatorVersion
opencart:opencartopencarteq*

CPE	Name	Operator	Version
opencart:opencart	opencart	eq	*

CNA Affected

[
  {
    "product": "opencart/opencart",
    "versions": [
      {
        "version": "4.0.0.0",
        "lessThan": "*",
        "status": "affected",
        "versionType": "semver"
      }
    ],
    "vendor": "n/a"
  }
]