7.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.7%
Lack of authentication in NPM’s package @evershop/evershop before version 1.0.0-rc.8, allows remote attackers to obtain sensitive information via improper authorization in GraphQL endpoints.
devhub.checkmarx.com/cve-details/CVE-2023-46942/
devhub.checkmarx.com/cve-details/Cx00cea2d5-d2c5/