Lucene search
HistorySep 16, 2024 - 6:15 p.m.
CVE-2023-45854
business logic
vulnerability
negative quantities
shopping cart
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0
Percentile
9.6%
A Business Logic vulnerability in Shopkit 1.0 allows an attacker to add products with negative quantities to the shopping cart via the qtd parameter in the add-to-cart function.
Related
cve
cve
CVE-2023-45854
2024-09-16 18:15:53
cvelist
cvelist
CVE-2023-45854
2024-09-16 00:00:00
vulnrichment
vulnrichment
CVE-2023-45854
2024-09-16 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0
Percentile
9.6%
Related for NVD:CVE-2023-45854