Lucene search
HistoryNov 17, 2023 - 5:15 a.m.
CVE-2023-42428
cubecart
directory traversal
vulnerability
remote attacker
administrative privilege
file deletion
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
0.001 Low
EPSS
Percentile
35.3%
Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system.
Affected configurations
Node
cubecartcubecartRange<6.5.3
Related
cve
cve
CVE-2023-42428
2023-11-17 05:15:12
cvelist
cvelist
CVE-2023-42428
2023-11-17 04:37:21
prion
prion
Directory traversal
2023-11-17 05:15:00
jvn
jvn
JVN#22220399: Multiple vulnerabilities in CubeCart
2023-11-17 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
0.001 Low
EPSS
Percentile
35.3%
Related for NVD:CVE-2023-42428