Lucene search
HistoryNov 01, 2022 - 5:15 p.m.
CVE-2022-40839
sql injection
ndkadvancedcustomizationfields
unauthenticated attackers
exfiltrate
database data
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
60.5%
A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data.
Affected configurations
Node
ndk-designndkadvancedcustomizationfieldsMatch3.5.0prestashop
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ndk-design | ndkadvancedcustomizationfields | 3.5.0 | cpe:2.3:a:ndk-design:ndkadvancedcustomizationfields:3.5.0:*:*:*:*:prestashop:*:* |
Related
cvelist
cvelist
CVE-2022-40839
2022-11-01 00:00:00
cve
cve
CVE-2022-40839
2022-11-01 17:15:12
prion
prion
Sql injection
2022-11-01 17:15:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
60.5%
Related for NVD:CVE-2022-40839